http://www.hughes-family.org/bugzilla/show_bug.cgi?id=123
Summary: Attached Spam crashes spamassassin
Product: Spamassassin
Version: 2.11
Platform: PC
OS/Version: FreeBSD
Status: NEW
Severity: critical
Priority: P1
Component: spamc/spamd
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
I am running FreeBSD 4.5 and Spamassassin 2.11 (with spamc/spamd). When the
attached piece of spam is recieved, procmail sends it to spamc to process,
where the problem occurs. A runaway perl process will run forever (at 100% load
for several days). 15 minutes later, procmail will deliver the unprocessed
original to my mailbox. For each additional mairecieved, an additional perl
process is started with the same behavior.
/var/log/maillog:
Mar 24 16:18:47 username-3 sendmail[99252]: g2OGIlM99252: from=<boosterh490@exci
te.com>, size=3104, class=0, nrcpts=1, msgid=<003b38d05aaa$8523e5e2$8be12ec7@kwc
bfr>, proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Mar 24 16:18:48 username-3 spamd[93507]: connection from localhost [ 127.0.0.1 ]
at port 4078
Mar 24 16:20:48 username-3 sendmail[99253]: g2OGIlM99252: timeout waiting for in
put from local during Draining Input
Mar 24 16:34:48 username-3 sendmail[99253]: g2OGIlM99252: to="|IFS=' ' && p=/usr
/local/bin/procmail && test -f $p && exec $p -Yf- || exit 75 #username", ctladdr
=<username@localhost> (1000/1000), delay=00:16:01, xdelay=00:16:00, mailer=prog,
pri=32209, dsn=2.0.0, stat=Sent
relevant procmailrc line:
:0fw
| /usr/local/bin/spamc -f
The system works for all email besides the one below (and similar ones from the
same source adv. insurance -of which I have recieved several, all of the form
[EMAIL PROTECTED]) Below is the mail that caused the problem (with my
username replaced with 'username')
>From [EMAIL PROTECTED] Sun Mar 24 11:18:48 2002
Received: from localhost (localhost [127.0.0.1])
by username-3.user.msu.edu (8.11.6/8.11.6) with ESMTP id g2OGIlM99252
for <username@localhost>; Sun, 24 Mar 2002 16:18:47 GMT
(envelope-from [EMAIL PROTECTED])
Received: from pilot.msu.edu [35.9.5.45]
by localhost with POP3 (fetchmail-5.9.6)
for username@localhost (single-drop); Sun, 24 Mar 2002 16:18:47 +0000 (G
MT)
Received: from excite.com (tongduchon.kyonggi.kr [210.104.220.65] (may be forged
))
by pilot10.cl.msu.edu (8.10.2/8.10.2) with SMTP id g2OGIuq38978
for <[EMAIL PROTECTED]>; Sun, 24 Mar 2002 11:18:59 -0500
Date: Sun, 24 Mar 2002 11:18:59 -0500
Received: from unknown (104.29.93.231)
by rly-xr01.mx.aol.com with QMQP; 24 Mar 2002 21:36:37 -0800
Reply-To: <[EMAIL PROTECTED]>
Message-ID: <003b38d05aaa$8523e5e2$8be12ec7@kwcbfr>
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: INSURANCE - LOWEST RATES AROUND - FREE QUOTE (0160nUZj5-556jSxm8@17)
MiME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
Importance: Normal
Status: RO
Content-Length: 2190
Lines: 43
<html>
<head>
</head>
<body bgcolor="#FFFFFF">
Hi,
<table WIDTH="513" >
<tr>
<td WIDTH="420"> </td>
</tr>
<tr>
<td><b><i><font face="Times"><font color="#000080"><font size=+3>Low-Cost
Term-Life Insurance!</font></font></font></i></b><b><font size=+1></font></b>
<p><b><font face="Tahoma,Arial,Helvetica"><font size=+1>SAVE up to 70%
or more on your term life insurance policy now.</font></font></b><b><font size=+
1></font></b>
<p><b><font face="Tahoma,Arial,Helvetica"><font size=+1><a href="http://www.find
outeverything.com/lowlifeins448">CLICK
HERE NOW For your FREE Quote!</a></font></font></b>
<br><b><font face="Tahoma,Arial,Helvetica"><font size=+1><a href="http://www.fin
douteverything.com/lowlifeins448">http://www.findouteverything.com/lowlifeins448
</a></font></font></b><b><font size=+1></font></b>
<p><b><font face="Tahoma,Arial,Helvetica"><font size=+1>If you haven't
taken the time to think about what you are paying for life insurance...now
is the time!!!</font></font></b><b><font size=+1></font></b>
<p><b><font face="Tahoma,Arial,Helvetica"><font size=+1>We offer the lowest
rates available from nationally recognized carriers.</font></font></b><b><font s
ize=+1></font></b>
<p><b><font face="Tahoma,Arial,Helvetica"><font size=+1>Act now and pay
less!</font></font></b><b><font size=+1></font></b>
<p><b><font face="Tahoma,Arial,Helvetica"><font size=+1><a
href="http://www.findouteverything.com/lowlifeins448";>CLICK
HERE NOW For your FREE Quote!</a></font></font></b>
<br><b><font face="Tahoma,Arial,Helvetica"><font size=+1><a href="http://www.fin
douteverything.com/lowlifeins448">http://www.findouteverything.com/lowlifeins448
</a></font></font></b>
<br>
<hr WIDTH="100%">
<br><b><font face="Arial,Helvetica"><font size=+1>Removal Option:</font></font><
/b>
<br><b><font face="Arial,Helvetica"><font size=+1>This message is emailed
speech without prejudice. If you desire to be removed from our email list
simply hit Reply and send email with Remove in the Subject. Or Email: jerry637@e
xcite.com
With Remove in the Subject.</font></font></b>
<br><b><font size=+1> </font></b></td>
</tr>
</table>
</body>
</html>
[0830BnIY5-308VsHh7688ovZK8-002skxa3289Hi@38]
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
