Phishing emails cause MailScanner to loop infinitely

[Martin Hepworth]

Running 4.53.5 here and no problems that I've noticed..but am NOT running
the stricter checks...

--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Randal, Phil
> Sent: 04 May 2006 16:40
> To: MailScanner discussion
> Subject: RE: Phishing emails cause MailScanner to loop infinitely
> 
> I think it affects everybody.  I've just backrev'd to 4.52.2 because of
> an ever increasing incoming mail queue under 4.53.6 on Linux.
> 
> And the backlog is vanishing fast under 4.52.2.
> 
> Cheers,
> 
> Phil
> 
> ----
> Phil Randal
> Network Engineer
> Herefordshire Council
> Hereford, UK
> 
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> > Of Jeff A. Earickson
> > Sent: 04 May 2006 15:14
> > To: MailScanner discussion
> > Subject: Re: Phishing emails cause MailScanner to loop infinitely
> >
> > Anthony,
> >
> > Sounds like the same problem I discovered yesterday.  Both you and
> > I are running Solaris (10 sparc for me), the Linux/BSD crowd hasn't
> > seen this yet?
> >
> > Jeff Earickson
> > Colby College
> >
> > On Thu, 4 May 2006, Anthony Peacock wrote:
> >
> > > Date: Thu, 04 May 2006 14:53:56 +0100
> > > From: Anthony Peacock <a.peacock at chime.ucl.ac.uk>
> > > Reply-To: MailScanner discussion
> > <mailscanner at lists.mailscanner.info>
> > > To: mailscanner at lists.mailscanner.info
> > > Subject: Phishing emails cause MailScanner to loop infinitely
> > >
> > > Hi,
> > >
> > > I have just had to back out of MS 4.53.7 to MS 4.52.2,
> > because the MS
> > > processes got stuck in a loop when they found a phishing email.
> > >
> > > I am running on Solaris 8 x86.
> > >
> > > After the upgrade all worked well for a while, and then I
> > noticed that the
> > > incoming queue was getting backed up.  When I looked at the
> > logs it appeared
> > > that the MS processes were looping around finding a phishing email.
> > >
> > > I have attached a text file with the relevant log lines for
> > one of the
> > > processes.  In reality there were many MS processes stuck
> > in these loops for
> > > different phishing sites.
> > >
> > > I have saved some of the queue files that caused this and
> > once things have
> > > settled down may be able to test this in DEBUG mode.
> > >
> > > Backup off to MS 4.52.2 caused all of the queue to be
> > processed successfully.
> > >
> > > --
> > > Anthony Peacock
> > > CHIME, Royal Free & University College Medical School
> > > WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
> > > "The most exciting phrase to hear in science, the one that
> > heralds new
> > > discoveries, is not 'Eureka!' but 'That's funny....'" --
> > Isaac Asimov
> > > --
> > > MailScanner mailing list
> > > mailscanner at lists.mailscanner.info
> > > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> > >
> > > Before posting, read http://wiki.mailscanner.info/posting
> > >
> > > Support MailScanner development - buy the book off the website!
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************