I think I'm experiencing the same problem described here:
http://www.nntp.perl.org/group/perl.qpsmtpd/2006/11/msg5815.html
Environment is the same, behavior identical.
But I'm able to reproduce the problem at will, I have a mail that is
sent partially to spamd.
The symptoms are:
1. spam mail is not recognized as spam, no tests match (X-Spam-Status:
No, hits= required= tests=)
2. spamd logs:
warn: spamd: timeout: (300 second timeout while trying to SYMBOLS)
at /usr/bin/spamd line 2016, <GEN481> line 19.
3. qpsmtpd logs have a 5 minute delay between send to spam and answer
(see below)
The mail has only two body lines, the first is very long. Here it is:
GET YOUR DIPLOMA TODAY!If you are looking for a fast and effective way
to get a diploma,(non accredited) this is the best way out for you.
Provide us with degree you are interested in. Call us right now on:
For US: 1.845.709.8044 Outside US: +1.845.709.8044 "Just leave your
NAME & PHONE NO. (with CountryCode)" in the voicemail.
If I cut that line after Code)" the mail arrives to spamd, if I don't
cut the space before "in" spamd receives only the headers.
See this spamd strace (headers only):
read(6, "SYMBOLS SPAMC/1.3\r\nUser: qpsmtpd\r\n\r\nX-Envelope-From:
<perceptua...@studguard.de>\r\nReceived: from c2.nethesis.it (HELO
pc-federico) (77.238.14.78)\r\n by nethesis.it (qpsmtpd/0.40) with
SMTP; Wed, 15 Jul 2009 18:17:09 +0200\r\nDate: Tue, 14 Jul 2009
19:00:57 +0700\r\nFrom: \"Pat Bright\"
<forbidding...@sparkus.com>\r\nSubject: Get a degree with no
problems.\r\nTo: <cristian.man...@nethesis.it>\r\nMessage-ID:
<000d01ca047a$bf729840$6400a...@forbiddingsz3>\r\nMIME-Version:
1.0\r\nX-MIMEOLE: Produced By Microsoft MimeOLE
V6.0.6001.18049\r\nX-Mailer: Microsoft Windows Mail
6.0.6001.18000\r\nContent-type: text/plain; format=flowed;
charset=iso-8859-1; reply-type=original\r\nContent-transfer-encoding:
7bit\r\nX-Priority: 3\r\nX-MSMail-priority: Normal\r\n\r\n", 4096) =
733
Spamd strace of modified mail:
read(6, "SYMBOLS SPAMC/1.3\r\nUser: qpsmtpd\r\n\r\nX-Envelope-From:
<perceptua...@studguard.de>\r\nReceived: from c2.nethesis.it (HELO
pc-federico) (77.238.14.78)\r\n by nethesis.it (qpsmtpd/0.40) with
SMTP; Wed, 15 Jul 2009 19:03:11 +0200\r\nDate: Tue, 14 Jul 2009
19:00:57 +0700\r\nFrom: \"Pat Bright\"
<forbidding...@sparkus.com>\r\nSubject: Get a degree with no
problems.\r\nTo: <cristian.man...@nethesis.it>\r\nMessage-ID:
<000d01ca047a$bf729840$6400a...@forbiddingsz3>\r\nMIME-Version:
1.0\r\nX-MIMEOLE: Produced By Microsoft MimeOLE
V6.0.6001.18049\r\nX-Mailer: Microsoft Windows Mail
6.0.6001.18000\r\nContent-type: text/plain; format=flowed;
charset=iso-8859-1; reply-type=original\r\nContent-transfer-encoding:
7bit\r\nX-Priority: 3\r\nX-MSMail-priority: Normal\r\n\r\nGET YOUR
DIPLOMA TODAY!If you are looking for a fast and effective way to get a
diploma,(non accredited) this is the best way out for you. Provide us
with degree you are interested in. Call us right now on: For US:
1.845.709.8044 Outside US: +1.845.709.8044 \"Just leave your NAME &
PHONE NO."..., 4096) = 1103
I'd like to test that mail against another different installation of
qpsmtpd+spamd, would it be possible to send it to perl.org or some
qpsmtpd powered mail server?
I have an expect script if anybody is interested.
Do you have any pointer on how to try to attack this problem?
Thank you.
--
Ciao,
Filippo
