I assume this output is from 4.3.1, but is it with or without the patch? -- Sam Clippinger
On Jun 19, 2013, at 5:15 AM, Arne Metzger wrote: > As far as i can see, the error only exists when printing this log message > > Jun 19 12:05:00 shjjv spamdyke[20736]: FILTER_IP_IN_RDNS_BLACKLIST ip: > 114.32.207.47 rdns: 114-32-207-47.hinet-ip.hinet.net keyword: .net file: > /var/qmail/spamdyke/blacklist_keywords(7) > Jun 19 12:05:00 shjjv spamdyke[20736]: DENIED_IP_IN_RDNS from: > [email protected] to: [email protected] origin_ip: 114.32.207.47 > origin_rdns 114-32-207-47.hinet-ip.hinet.net auth: (unknown) encryption: > (none) reason: /var^Y > > All other log entries today look ok. > > Regards, > Arne > > Am 19.06.2013 09:13, schrieb Arne Metzger: >> Hi Sam, >> >> thank you for quick fast replay. >> >> That doesn't do the trick, after the patch almost nothing is logged. >> >> With patch: >> Jun 19 08:39:49 shjjv spamdyke[13707]: [email protected] >> Jun 19 08:39:49 shjjv spamdyke[13707]: DENIED_GRAYLISTED >> >> Original 4.3.1 >> Jun 19 09:08:49 shjjv spamdyke[16171]: FILTER_GRAYLISTED sender: >> [email protected] recipient: [email protected] path: >> /var/qmail/spamdyke/graylist/sxxxv.de/wxxxr/mexxxg.de/axxe >> Jun 19 09:08:49 shjjv spamdyke[16171]: DENIED_GRAYLISTED from: >> [email protected] to: [email protected] origin_ip: 77.232.76.11 origin_rdns: >> smtp1.servage.net auth: (unknown) encryption: TLS reason: (empty) >> >> While applying the patch i noticed that i was running 4.2.1 >> I also noticed, that only log line being truncated, that refer to >> blacklists. Other lines like graylisted, allowed, rdns_missing are >> logged without being truncated. >> >> As i am now running 4.3.1 i will have an eye on my log and post some >> lines, as soon as they appear. >> >> Regards, >> Arne >> >> >> Am 18.06.2013 17:50, schrieb Sam Clippinger: >>> I strongly suspect this is a bug I've already fixed in the next version: >>> sometimes on 64-bit Linux systems, vsyslog() won't print all of the >>> arguments its given and inserts control characters instead. Usually it >>> inserts the null character (which ends the string) but yours seems to be >>> inserting lots of other junk as well. If you could run spamdyke with the >>> "log-target" option set to "stderr", the problem would likely go away. >>> >>> It doesn't seem to cause any problems with spamdyke's operation, it just >>> doesn't print complete log messages. >>> >>> You can try fixing it yourself, if you'd like. In version 4.3.1, edit >>> log.c and go down to line 506. You should see this: >>> vsyslog(syslog_level, format, tmp_va); >>> Replace it with these two lines: >>> vsnprintf(tmp_data, MAX_BUF, format, tmp_va); >>> syslog(syslog_level, "%s", tmp_data); >>> Recompile it with "make" and replace the spamdyke binary with the new one. >>> That should do it! >>> >>> -- Sam Clippinger >>> >>> >>> >>> >>> On Jun 18, 2013, at 1:33 AM, Arne Metzger wrote: >>> >>>> Hi, >>>> >>>> here are two log lines using tail from command line in a putty ssh session: >>>> >>>> Jun 18 08:15:09 sxxxv spamdyke[6336]: FILTER_BLACKLIST_NAME ip: >>>> 217.160.78.38 rdns: s16119092.onlinehome-server.info file: >>>> /var/qmail/spamdyke/blacklist_rdns(80) >>>> Jun 18 08:15:09 sxxxv spamdyke[6336]: DENIED_BLACKLIST_NAME from: >>>> [email protected] to: [email protected] origin_ip: 217.160.78.38 >>>> origin_rdns: s16119092.onlinehome-server.info auth: (unknown) >>>> encryption: TLS reason: >>>> ^B^B^B^B^B^B^_^B^B^B^B^B^B^B^B^B^]^B^B^A^R^A^A^B^Z^B^^^B^B^B^B^B^B^B^B^B^B^B^_^B^B^B^B^B^B^B^B^B^]^B^B^A^P^A^A^A^A^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^A^A^A >>>> Jun 18 08:15:09 shjjv spamdyke[6336]: DENIED_BLACKLIST_NAME from: >>>> [email protected] to: [email protected] origin_ip: 217.160.78.38 >>>> origin_rdns: s16119092.onlinehome-server.info auth: (unknown) >>>> encryption: TLS reason: >>>> ^B^B^B^B^B^B^_^B^B^B^B^B^B^B^B^B^]^B^B^A^R^A^A^B^Z^B^^^B^B^B^B^B^B^B^B^B^B^B^_^B^B^B^B^B^B^B^B^B^]^B^B^A^P^A^A^A^A^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^A^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^B^A^A^A >>>> >>>> Regards, >>>> Arne >>>> >>>> Am 18.06.2013 07:59, schrieb Arne Metzger: >>>>> Hi Eric, >>>>> >>>>> i use maillog on my "plesk-system". normally i have multitail running in >>>>> a putty window, but i try tail today. >>>>> >>>>> Reagrs, >>>>> Arne >>>>> >>>>> Am 17.06.2013 18:29, schrieb Eric Shubert: >>>>>> What are your log related config settings? >>>>>> If log-target is syslog, which syslog software are you using? >>>>>> If log-target is stderr, please include sample of your run file. >>>>>> >>>>>> On 06/17/2013 06:54 AM, Arne Metzger wrote: >>>>>>> I dont want to confuse you, so here the log lines without line breaks >>>>>>> >>>>>>> Jun 17 15:45:51 shjjv spamdyke[9610]: FILTER_RBL_MATCH ip: >>>>>>> 203.80.244.134 rbl: zen.spamhaus.org >>>>>>> Jun 17 15:45:51 shjjv spamdyke[9610]: DENIED_RBL_MATCH from: >>>>>>> [email protected] to: jxxxt-OrRQzMG+/[email protected] >>>>>>> origin_ip: 203.80.244.134 >>>>>>> origin_rdns: mail.con-link.com auth: (unknown) encryption: (none) >>>>>>> reason: zen.^Y >>>>>>> >>>>>>> Second entry is truncated at ^Y >>>>>>> >>>>>>> Am 17.06.2013 15:50, schrieb Arne Metzger: >>>>>>>> Hello, >>>>>>>> >>>>>>>> i just wonder why some of my log entries are truncted >>>>>>>> >>>>>>>> Jun 17 15:45:51 shjjv spamdyke[9610]: FILTER_RBL_MATCH ip: >>>>>>>> 203.80.244.134 rbl: z >>>>>>>> en.spamhaus.org >>>>>>>> Jun 17 15:45:51 shjjv spamdyke[9610]: DENIED_RBL_MATCH from: >>>>>>>> [email protected] t >>>>>>>> o: [email protected] origin_ip: 203.80.244.134 origin_rdns: >>>>>>>> mail.con-link. >>>>>>>> com auth: (unknown) encryption: (none) reason: zen.^Y >>>>>>>> >>>>>>>> Any hints? >>>>>>>> >>>>>>>> Regards, >>>>>>>> Arne >>>>>>>> >>>>>>>> PS: Sam, Thank you soooo much for your fantastic work! I Love spamdyke! >>>>>>>> _______________________________________________ >>>>>>>> spamdyke-users mailing list >>>>>>>> [email protected] >>>>>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>>> _______________________________________________ >>>>> spamdyke-users mailing list >>>>> [email protected] >>>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>>> _______________________________________________ >>>> spamdyke-users mailing list >>>> [email protected] >>>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >>> _______________________________________________ >>> spamdyke-users mailing list >>> [email protected] >>> http://www.spamdyke.org/mailman/listinfo/spamdyke-users >> _______________________________________________ >> spamdyke-users mailing list >> [email protected] >> http://www.spamdyke.org/mailman/listinfo/spamdyke-users > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
