Your message dated Tue, 17 Aug 2010 15:13:12 -0700
with message-id <[email protected]>
and subject line closing bug
has caused the Debian Bug report #491134,
regarding dk-filter: Sudden verification errors, signing seems fine
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
491134: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=491134
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dk-filter
Version: 1.0.0.dfsg-1+b1
Severity: normal
Things were running along, and then - all of a sudden, this starts
showing up in syslog (some truncation):
milter-greylist: m6GNdcho021163: skipping greylist because sender DNS
name vger.kernel.org is whitelisted,
(from==40cavein.org-s1760000abygp...@v
sm-mta[21163]: m6GNdcho021163:
from=<linux-kernel-owner+cowboy=40cavein.org-s1760000abygp...@vger.kernel.org>,
size=3509, class=0, nrcpts=1, msgi
sm-mta[21163]: m6GNdcho021163: Milter add:
header: X-Greylist: Sender DNS name whitelisted, not delayed by
milter-greylist-3.0 (smtp.cavein.org [
named[20185]: 16-Jul-2008 23:39:38.956
client 127.0.0.1#45974: view internal: query:
default._domainkey.virtuousgeek.org IN TXT +
dk-filter[10752]: m6GNdcho021163: dk_eom():
resource unavailable: d2i_PUBKEY_bio() failed
dk-filter[10752]: m6GNdcho021163 SSL
error:0D06B08E:asn1 encoding routines:ASN1_D2I_READ_BIO:not enough data
sm-mta[21163]: m6GNdcho021163: Milter:
data, reject=451 4.3.2 Please try again later
sm-mta[21163]: m6GNdcho021163:
to=<[email protected]>, delay=00:00:00, pri=33509, stat=Please try again
later
Running the filter foreground:
/usr/bin/dk-filter -u dk-filter -P /var/run/dk-filter/dk-filter.pid -p \
/var/run/dk-filter/dk-filter.sock -R -l -b sv -c nofws -h -H -i \
/etc/mail/dkim.localhosts -o \
return-path,received,comments,keywords,bcc,resent-bcc,dkim-signature,x-domainkeys,x-spf-record,x-scanned-by,x-spam-score,x-greylist
\
-d cavein.org -D -s /etc/mail/dk.private -S 2008 -f
Doesn't show any messages at all :(
My guess, without looking at the code, is that it must be getting a
short resonce from some DNS server (the PUBKEY has to come from DNS) ?
I had recently built the milter interface with worker-pools, but this
error seemed to start this morning (after running almost a whole day
without issues)... removing the worker-pool in a private build does not
correct the error.
I get alot of these, all seeming to come from the linux-kernel mailing
list ! It seems to be a good way to find the folks who have
half-heartedly setup dk/dkim (esp gmail/yahoo) :(
-- System Information:
Debian Release: lenny/sid
APT prefers testing-proposed-updates
APT policy: (500, 'testing-proposed-updates'), (500, 'proposed-updates'),
(500, 'oldstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.25.10 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages dk-filter depends on:
ii adduser 3.108 add and remove users and groups
ii libc6 2.7-12 GNU C Library: Shared libraries
ii libmilter1.0.1 8.14.3-6 Sendmail Mail Filter API (Milter)
ii libssl0.9.8 0.9.8g-10.1 SSL shared libraries
dk-filter recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Looking back over this, it appears that things are basically behaving as
expected: some SSL errors are occurring when badly-formatted keys are
found in DNS, but they're not causing messages to be tempfailed as long
as the filter is configured to accept that error state, and other
messages are not impacted. As such, I believe this is resolved.
--
Mike Markley <[email protected]>
--- End Message ---
