4.53.7, endless loop in debug mode

[Randal, Phil]

Julian,

This one needs a 4.53.8 release, because it can affect anybody.

Cheers,

Phil

----
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK  

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info 
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf 
> Of Anthony Peacock
> Sent: 05 May 2006 11:34
> To: MailScanner discussion
> Subject: Re: 4.53.7, endless loop in debug mode
> 
> Hi Julian,
> 
> Thanks for this.
> 
> Replacing the previous Message.pm with this new one seems to 
> have fixed 
> the problem.
> 
> I placed the saved queue files that were causing the problem 
> yesterday 
> in the incoming queue, and MS ran without hitch, both in 
> debug mode and 
> in normal operation.
> 
> I will keep and eye on this and get back if I noticed any 
> further glitches.
> 
> Julian Field wrote:
> > Please can you try the attached Message.pm file instead of 
> your previous 
> > one. I have rewritten a whole chunk of the phishing net and 
> it should be 
> > more reliable now (I hope!).
> > 
> > 
> > --This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> > MailScanner thanks transtec Computers for their support.
> > 
> > 
> > On 3 May 2006, at 19:52, Jeff A. Earickson wrote:
> > 
> >> The attached message cause 4.53.7
> >> to go into some kind of endless loop when I ran it in debug
> >> mode.  I didn't try it in normal mode.  The debug output is
> >> attached too.
> >>
> >> In debug mode, I got hundreds of syslog msgs like:
> >>
> >> MailScanner[16465]: Found phishing fraud from 
> www.evite.com claiming 
> >> to be 
> >> 
> www.greetingstoall,afternearly3yearsbackinthestates,i'mheading
> backtolondonforwor 
> >> in k43IWccm014788
> >>
> >> I've fallen back to 4.52.2.  My setup: Solaris 10, sendmail 8.13.6,
> >> SA 3.1.1.
> >>
> >> Jeff Earickson
> >> Colby College
> >> <qfk43IWccm014788>
> >> <dfk43IWccm014788>
> >> <ms.debug4>
> > 
> > --Julian Field
> > www.MailScanner.info
> > Buy the MailScanner book at www.MailScanner.info/store
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> > 
> 
> 
> -- 
> Anthony Peacock
> CHIME, Royal Free & University College Medical School
> WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
> "The most exciting phrase to hear in science, the one that 
> heralds new 
> discoveries, is not 'Eureka!' but 'That's funny....'" -- Isaac Asimov
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 
>