I don't see anything obviously wrong with your "run" file, but it
certainly looks like two spamdyke log lines are overlapping for some reason.
After going through some source code, I see this is a problem with the
basic design of DJB's multilog program. When spamdyke prints logging
output to stderr, it actually uses three function calls to do it. The
first prints "spamdyke[PID]:", the second prints the rest of the log
text and the third prints a newline character. If two different
spamdyke processes print messages at the same time, those three calls
can become intermixed (a classic race condition). Because multilog only
uses one pipe for input, it can't separate input from two different
processes to keep the messages intact. It just prints what it sees
which, in this case, is garbage.
I'll update spamdyke to print its log messages using a single function
call; that should work around this problem. This is just one more
reason not to use multilog, I guess.
Thanks for reporting this!
-- Sam Clippinger
Philip Nix Guru wrote:
Yes the * were added manually
sorry for the confusion
# cat /var/qmail/supervise/smtp/run
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/local/bin/spamdyke"
SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0
exec /usr/bin/softlimit -m 12000000 \
/usr/bin/tcpserver -v -R -h -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
$SPAMDYKE --config-file $SPAMDYKE_CONF \
$SMTPD $VCHKPW /bin/true 2>&1
-P
Sam Clippinger wrote:
It looks like spamdyke is being run multiple times for each
connection -- the two spamdyke PIDs in the logs are different. What
does your "run" file look like?
I have no idea where the asterisks came from. Did you insert those
manually to highlight the duplicated text?
-- Sam Clippinger
Philip Nix Guru wrote:
Hello
I was playing with a spamdyke-stats.pl script I saw, trying to
update it to work with the qtoaster setup
and I was getting some strange results .. so I checked the logs
and found that that I had a few spamdyke[###]:spamdyke[####] in my
smtp log file
example : (I converted TAI64N timestamps for better readings)
2008-11-03 23:51:28.405450500 spamdyke[26362]: DENIED_RBL_MATCH
from: [EMAIL PROTECTED] to: [EMAIL PROTECTED]
origin_ip: 86.2.231.197 origin_rdns:
cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)
2008-11-03 23:51:28.446391500 *spamdyke[26365]: spamdyke[26362]*:
DENIED_RBL_MATCH from: [EMAIL PROTECTED] to:
[EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns:
cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth:
(unknown)DENIED_RBL_MATCH from:
[EMAIL PROTECTED] to: [EMAIL PROTECTED]
origin_ip: 86.2.231.197 origin_rdns:
cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)
2008-11-03 23:51:28.488134500 *spamdyke[26365]: spamdyke[26362]*:
DENIED_RBL_MATCH from: [EMAIL PROTECTED] to:
[EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns:
cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth:
(unknown)DENIED_RBL_MATCH from:
[EMAIL PROTECTED] to: [EMAIL PROTECTED]
origin_ip: 86.2.231.197 origin_rdns:
cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)
2008-11-03 23:51:28.536631500 *spamdyke[26365]: spamdyke[26362]*:
DENIED_RBL_MATCH from: [EMAIL PROTECTED]
to: [EMAIL PROTECTED] origin_ip: 86.2.231.197 origin_rdns:
cpc2-hudd10-0-0-cust964.hudd.cable.ntl.com auth: (unknown)
It seems to happen when you have multiple emails reaching different
users on the same domain
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]