Hi there,
I'm running dspam 3.6.8 and exim 4.69 on amd64.
Exim passes mail to dspam like this
/usr/local/bin/dspam --deliver=innocent --user
${lc:[EMAIL PROTECTED]:$domain}
-bm ${lc:[EMAIL PROTECTED]:$domain}
And dspam returns the innocent mail to exim like this
/usr/sbin/exim4 -oMr spam-scanned -bm [EMAIL PROTECTED]
I've been running dspam for years in this way.
A message arrived a few days ago that is scanned just fine by dspam and
deemed innocent:
4179: [07/31/2008 12:27:51] DSPAM Instance Startup
4179: [07/31/2008 12:27:51] input args: /usr/local/bin/dspam
--deliver=innocent --user [EMAIL PROTECTED] -bm [EMAIL PROTECTED]
4179: [07/31/2008 12:27:51] pass-thru args: /usr/sbin/exim4 -oMr
spam-scanned -bm [EMAIL PROTECTED]
4179: [07/31/2008 12:27:51] processing user [EMAIL PROTECTED]
4179: [07/31/2008 12:27:51] uid = 102, euid = 102, gid = 8, egid = 8
4179: [07/31/2008 12:27:51] loading preferences for user [EMAIL PROTECTED]
4179: [07/31/2008 12:27:51] Loading preferences for uid 13
4179: [07/31/2008 12:27:51] Loading preferences for uid 0
4179: [07/31/2008 12:27:51] default preferences empty. reverting to
dspam.conf preferences.
4179: [07/31/2008 12:27:51] Loading preferences from dspam.conf
4179: [07/31/2008 12:27:51] using /usr/local/var/dspam/opt-in/
pong.be/ward.dspam as path
4179: [07/31/2008 12:27:51] using /usr/local/var/dspam/opt-out/
pong.be/ward.nodspam as path
4179: [07/31/2008 12:27:51] sedation level set to: 5
4179: [07/31/2008 12:27:51] Loading 398 BNR patterns
4179: [07/31/2008 12:27:51] Whitelist threshold: 10
4179: [07/31/2008 12:27:51] [graham] [0.000611] bevestigen (2frq, 0s, 482i)
4179: [07/31/2008 12:27:51] [burton] [0.000611] bevestigen (2frq, 0s, 482i)
4179: [07/31/2008 12:27:51] [burton] [0.000611] bevestigen (2frq, 0s, 482i)
4179: [07/31/2008 12:27:51] [graham] [0.001921] bevestigen+dat (2frq, 0s,
153i)
4179: [07/31/2008 12:27:51] [burton] [0.001921] bevestigen+dat (2frq, 0s,
153i)
4179: [07/31/2008 12:27:51] [burton] [0.001921] bevestigen+dat (2frq, 0s,
153i)
4179: [07/31/2008 12:27:51] [graham] [0.002087] 26+26 (2frq, 6s, 845i)
4179: [07/31/2008 12:27:51] [burton] [0.002087] 26+26 (2frq, 6s, 845i)
4179: [07/31/2008 12:27:51] [burton] [0.002087] 26+26 (2frq, 6s, 845i)
4179: [07/31/2008 12:27:51] [graham] [0.003157] worden+door (2frq, 0s, 93i)
4179: [07/31/2008 12:27:51] [burton] [0.003157] worden+door (2frq, 0s, 93i)
4179: [07/31/2008 12:27:51] [burton] [0.003157] worden+door (2frq, 0s, 93i)
4179: [07/31/2008 12:27:51] [graham] [0.004131] klantnummer (2frq, 1s, 71i)
4179: [07/31/2008 12:27:51] [burton] [0.004131] klantnummer (2frq, 1s, 71i)
4179: [07/31/2008 12:27:51] [burton] [0.004131] klantnummer (2frq, 1s, 71i)
4179: [07/31/2008 12:27:51] [graham] [0.004727] 9050 (2frq, 1s, 62i)
4179: [07/31/2008 12:27:51] [burton] [0.004727] 9050 (2frq, 1s, 62i)
4179: [07/31/2008 12:27:51] [burton] [0.004727] 9050 (2frq, 1s, 62i)
4179: [07/31/2008 12:27:51] [graham] [0.005231] bruneau (2frq, 0s, 56i)
4179: [07/31/2008 12:27:51] [burton] [0.005231] bruneau (2frq, 0s, 56i)
4179: [07/31/2008 12:27:51] [burton] [0.005231] bruneau (2frq, 0s, 56i)
4179: [07/31/2008 12:27:51] [graham] [0.005855] 214+64 (4frq, 0s, 50i)
4179: [07/31/2008 12:27:51] [burton] [0.005855] 214+64 (4frq, 0s, 50i)
4179: [07/31/2008 12:27:51] [burton] [0.005855] 214+64 (4frq, 0s, 50i)
4179: [07/31/2008 12:27:51] [graham] [0.005855] jm+bruneau (2frq, 0s, 50i)
4179: [07/31/2008 12:27:51] [burton] [0.005855] jm+bruneau (2frq, 0s, 50i)
4179: [07/31/2008 12:27:51] [burton] [0.005855] jm+bruneau (2frq, 0s, 50i)
4179: [07/31/2008 12:27:51] [graham] [0.007132] Url*jm (10frq, 0s, 41i)
4179: [07/31/2008 12:27:51] [burton] [0.007132] Url*jm (10frq, 0s, 41i)
4179: [07/31/2008 12:27:51] [burton] [0.007132] Url*jm (10frq, 0s, 41i)
4179: [07/31/2008 12:27:51] [graham] [0.007985] jm (2frq, 53s, 1939i)
4179: [07/31/2008 12:27:51] [burton] [0.007985] jm (2frq, 53s, 1939i)
4179: [07/31/2008 12:27:51] [burton] [0.007985] jm (2frq, 53s, 1939i)
4179: [07/31/2008 12:27:51] [graham] [0.008034] kan+ik (2frq, 11s, 400i)
4179: [07/31/2008 12:27:51] [burton] [0.008034] kan+ik (2frq, 11s, 400i)
4179: [07/31/2008 12:27:51] [burton] [0.008034] kan+ik (2frq, 11s, 400i)
4179: [07/31/2008 12:27:51] [graham] [0.008587] 9000+Gent (2frq, 0s, 34i)
4179: [07/31/2008 12:27:51] [burton] [0.008587] 9000+Gent (2frq, 0s, 34i)
4179: [07/31/2008 12:27:51] [burton] [0.008587] 9000+Gent (2frq, 0s, 34i)
4179: [07/31/2008 12:27:51] [graham] [0.010000] alt="070 (1frq, 0s, 8i)
4179: [07/31/2008 12:27:51] [burton] [0.010000] alt="070 (1frq, 0s, 8i)
4179: [07/31/2008 12:27:51] [graham] [0.010000] reeds+betaald (1frq, 0s, 8i)
4179: [07/31/2008 12:27:51] Graham-Bayesian Probability: 0.000000 Samples:
15
4179: [07/31/2008 12:27:51] Burton-Bayesian Probability: 0.000000 Samples:
27
4179: [07/31/2008 12:27:51] no factors specified; using default
4179: [07/31/2008 12:27:51] Result Confidence: 0.99
4179: [07/31/2008 12:27:51] Control: [10 10] [10 11] Delta: [0 1]
4179: [07/31/2008 12:27:52] saving signature as 4891e80841795026718549
4179: [07/31/2008 12:27:52] libdspam returned probability of 0.000000
4179: [07/31/2008 12:27:52] message result: NOT SPAM
4179: [07/31/2008 12:27:52] delivering message
4179: [07/31/2008 12:27:52] Opening pipe to LDA: /usr/sbin/exim4 -oMr
spam-scanned -bm [EMAIL PROTECTED]
4179: [07/31/2008 12:27:52] DSPAM Instance Shutdown. Exit Code: 0
However; dspam somehow cuts the message short/dies while handing the message
back to exim:
2008-07-31 12:54:29 [5993] cwd=/var/spool/exim4 3 args: /usr/sbin/exim4 -Mc
1KObQ5-0001Ye-TC
2008-07-31 12:54:30 [5987] 1KNGco-0005Qr-2E <[EMAIL PROTECTED]>:
dspam_spamcheck_normal_accounts transport output: 5989: [07/31/2008
12:54:29] Error getting exit status of delivery agent: /usr/sbin/exim4 -oMr
spam-scanned -bm [EMAIL PROTECTED] : Broken pipe
2008-07-31 12:54:30 [5987] 1KNGco-0005Qr-2E ==
[EMAIL PROTECTED]
T=dspam_spamcheck_normal_accounts defer (0):
Child process of dspam_spamcheck_normal_accounts transport returned 255
(could mean shell command ended by signal 127 (Unknown signal 127)) from
command: /usr/local/bin/dspam
I suspect the message has a character that is not handled well by dspam.
Here's the relevant part of the message in the exim queue:
00000240 6f 6f 6e 62 65 73 74 65 6c 6c 69 6e 67 0a 76 61 |
oonbestelling.va|
00000250 6e 0a 32 33 20 4a 75 6c 69 20 32 30 30 38 0a 6f |n.23 Juli
2008.o|
00000260 6d 0a 31 31 75 32 33 0a 3d 32 45 0a 42 65 73 74
|m.11u23.=2E.Best|
00000270 65 20 6b 6c 61 6e 74 0a 0a 2c 20 54 6f 74 20 6d |e klant.., Tot
m|
00000280 69 6a 6e 20 67 72 6f 6f 74 20 67 65 6e 6f 65 67 |ijn groot
genoeg|
And this is where it cuts off when being piped to exim:
000007e0 66 6f 6f 6e 62 65 73 74 65 6c 6c 69 6e 67 0a 76
|foonbestelling.v|
000007f0 61 6e 0a 32 33 20 4a 75 6c 69 20 32 30 30 38 0a |an.23 Juli
2008.|
00000800 6f 6d 0a 31 31 75 32 33 0a |om.11u23.|
00000809
So it seems to die on '=2E'.
Is this a known bug?
Thanks,
Ward.
!DSPAM:1011,4891f5a1150926387921135!
