Phishing emails cause MailScanner to loop infinitely

[Randal, Phil]

If you're using mailscanner-mrtg you'll also see impossibly high "spam
identified" figures (greater than the total number of messages).

Cheers,

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Jeff A. Earickson
> Sent: 04 May 2006 15:14
> To: MailScanner discussion
> Subject: Re: Phishing emails cause MailScanner to loop infinitely
> 
> Anthony,
> 
> Sounds like the same problem I discovered yesterday.  Both you and
> I are running Solaris (10 sparc for me), the Linux/BSD crowd hasn't
> seen this yet?
> 
> Jeff Earickson
> Colby College
> 
> On Thu, 4 May 2006, Anthony Peacock wrote:
> 
> > Date: Thu, 04 May 2006 14:53:56 +0100
> > From: Anthony Peacock <a.peacock at chime.ucl.ac.uk>
> > Reply-To: MailScanner discussion 
> <mailscanner at lists.mailscanner.info>
> > To: mailscanner at lists.mailscanner.info
> > Subject: Phishing emails cause MailScanner to loop infinitely
> > 
> > Hi,
> >
> > I have just had to back out of MS 4.53.7 to MS 4.52.2, 
> because the MS 
> > processes got stuck in a loop when they found a phishing email.
> >
> > I am running on Solaris 8 x86.
> >
> > After the upgrade all worked well for a while, and then I 
> noticed that the 
> > incoming queue was getting backed up.  When I looked at the 
> logs it appeared 
> > that the MS processes were looping around finding a phishing email.
> >
> > I have attached a text file with the relevant log lines for 
> one of the 
> > processes.  In reality there were many MS processes stuck 
> in these loops for 
> > different phishing sites.
> >
> > I have saved some of the queue files that caused this and 
> once things have 
> > settled down may be able to test this in DEBUG mode.
> >
> > Backup off to MS 4.52.2 caused all of the queue to be 
> processed successfully.
> >
> > -- 
> > Anthony Peacock
> > CHIME, Royal Free & University College Medical School
> > WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
> > "The most exciting phrase to hear in science, the one that 
> heralds new 
> > discoveries, is not 'Eureka!' but 'That's funny....'" -- 
> Isaac Asimov
> > -- 
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
>