I don't see anything obviously wrong with your "run" file, but it certainly looks like two spamdyke log lines are overlapping for some reason.

After going through some source code, I see this is a problem with the basic design of DJB's multilog program. When spamdyke prints logging output to stderr, it actually uses three function calls to do it. The first prints "spamdyke[PID]:", the second prints the rest of the log text and the third prints a newline character. If two different spamdyke processes print messages at the same time, those three calls can become intermixed (a classic race condition). Because multilog only uses one pipe for input, it can't separate input from two different processes to keep the messages intact. It just prints what it sees which, in this case, is garbage.

I'll update spamdyke to print its log messages using a single function call; that should work around this problem. This is just one more reason not to use multilog, I guess.

Thanks for reporting this!

-- Sam Clippinger

Philip Nix Guru wrote:
Yes the * were added  manually
sorry for the confusion

# cat /var/qmail/supervise/smtp/run
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/local/bin/spamdyke"
SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0

exec /usr/bin/softlimit -m 12000000 \
    /usr/bin/tcpserver -v -R -h -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
    -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
    $SPAMDYKE --config-file $SPAMDYKE_CONF \
    $SMTPD $VCHKPW /bin/true 2>&1

-P

Sam Clippinger wrote:
It looks like spamdyke is being run multiple times for each connection -- the two spamdyke PIDs in the logs are different. What does your "run" file look like?

I have no idea where the asterisks came from. Did you insert those manually to highlight the duplicated text?

-- Sam Clippinger

Philip Nix Guru wrote:
Hello
I was playing with a spamdyke-stats.pl script I saw, trying to update it to work with the qtoaster setup
and I was getting some strange results .. so I checked the logs
and found that that I had a few spamdyke[###]:spamdyke[####] in my smtp log file

example : (I converted TAI64N timestamps for better readings)

2008-11-03 23:51:28.405450500 spamdyke[26362]: DENIED_RBL_MATCH from: [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns: cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown) 2008-11-03 23:51:28.446391500 *spamdyke[26365]: spamdyke[26362]*: DENIED_RBL_MATCH from: [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns: cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)DENIED_RBL_MATCH from: [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns: cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown) 2008-11-03 23:51:28.488134500 *spamdyke[26365]: spamdyke[26362]*: DENIED_RBL_MATCH from: [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns: cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)DENIED_RBL_MATCH from: [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns: cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown) 2008-11-03 23:51:28.536631500 *spamdyke[26365]: spamdyke[26362]*: DENIED_RBL_MATCH from: [EMAIL PROTECTED] to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns: cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)

It seems to happen when you have multiple emails reaching different users on the same domain




---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to