Don, thank you for the response. I hope this bug report does not mutate to a support case embarrasingly ;) Anyway I'm confused.... your source code is diffrent from mine... is there something newer than 0.3.2-1 in stable? Is your code from 0.3.2-1b1 from sid?
moritz@eroski:~/src$ apt-get source spamass-milter [...] Holen: 1 http://ftp.de.debian.org/debian/ wheezy/main spamass-milter 0.3.2-1 (dsc) [1.882 B] Holen: 2 http://ftp.de.debian.org/debian/ wheezy/main spamass-milter 0.3.2-1 (tar) [155 kB] Holen: 3 http://ftp.de.debian.org/debian/ wheezy/main spamass-milter 0.3.2-1 (diff) [15,1 kB] Es wurden 172 kB in 0 s geholt (526 kB/s). dpkg-source: Information: spamass-milter wird nach spamass-milter-0.3.2 extrahiert dpkg-source: Information: spamass-milter_0.3.2.orig.tar.gz wird entpackt dpkg-source: Information: spamass-milter_0.3.2-1.debian.tar.gz wird entpackt dpkg-source: Information: ignore_by_smtp_auth wird angewandt dpkg-source: Information: fix_spacing_in_received_header wird angewandt dpkg-source: Information: fix_header_char_cast wird angewandt dpkg-source: Information: add_ipv6_support wird angewandt dpkg-source: Information: auth_in_received wird angewandt Now, spamass-milter.cpp says string rec_header; rec_header=(string)"Received: from "+macro_s+" ("+macro__+")\r\n\t"; if (strlen(macro_auth_type)!=0) { rec_header+=(string)"(authenticated"; if (strlen(macro_auth_ssf)!=0) { rec_header+=(string)" bits="+macro_auth_ssf; } rec_header+=(string)")\r\n\t"; } rec_header+=(string)"by "+macro_j+"("+macro_v+"/"+macro_Z+") with "+ macro_r+" id "+macro_i+"\r\n\t"+ macro_b+"\r\n\t"+ "(envelope-from "+assassin->from()+"\r\n"; debug(D_SPAMC, "Received header for spamc: %s", rec_header.c_str()); assassin->output(rec_header); It is obvious that this code does not add the ; or ). To me it is not obvious why my dates are messed up. I added the -d ALL switch and wait for the next occurance in the next several hours. Regards, moritz On 13.01.2015 01:16, Don Armstrong wrote: > On Mon, 12 Jan 2015, Moritz Both wrote: >> Package: spamass-milter >> Version: 0.3.2-1 >> Severity: important >> >> Dear Don, >> >> when a message is detected as spam, it is prepended with a waring message. >> The original message appears as a mime attachment. >> >> This attachment has a bad Received: header like this: >> >> Received: from vwp12xxx.webpack.hosteurope.de >> (vwp12xxx.webpack.hosteurope.de [5.35.232.xxx]) >> by eroski.aldebaran.de(8.14.4/8.14.4/Debian-4) with ESMTP id >> t06Df1fZ019601 >> Wed, 10 Dec 2014 14:38:06 +0100 >> (envelope-from <scr...@wp11273xxx.server-he.de> >> >> Note the following problems: >> >> 1. The semicolon at the end of the id is missing (RFC 2822 >> requires it like "id t06Df1fZ019601;"). >> >> 2. The "(envelope-from"... comment does not have a closing parenthesis. >> >> 3. Most importantly, the date is wrong. This email was received on 06 Jan >> 2015. >> It is very strange that we have a wrong date here because the clock of the >> mail >> server running spamass-milter and sendmail has probably been correct; it is >> adjusted using ntp with several servers in the net. Also, all the other >> date headers in the mail are correct and if the clock would have been >> wrong, more header lines should be wrong, too. > > This is kind of odd... the actual code that generates this is the > following: > > assassin->output((string) > "Received: from "+macro_s+" ("+macro__+")\r\n\t"+ > "by "+macro_j+"("+macro_v+"/"+macro_Z+") with > "+macro_r+" id "+macro_i+";\r\n\t"+ > macro_b+"\r\n\t"+ > "(envelope-from "+assassin->from()+")\r\n"); > > which contains the semicolon and properly encloses the from. > > The date which is reported is by calling macro_b, or if that's not > available, by calling > > strftime(date, sizeof(date), "%a, %d %b %Y %H:%M:%S %z", localtime(&tval)); > > Could it be something in SA which is screwing up this header (or maybe > macro _b is totally screwed up?) > >> Jan 6 14:41:03 eroski sm-mta[19601]: t06Df1fZ019601: >> from=<scr...@wp11273xxx.server-he.de>, size=4298, class=0, nrcpts=1, >> msgid=<1420551661.54abe5ed54...@www.aldebaran.de>, proto=ESMTP, >> daemon=MTA-v4, relay=vwp12xxx.webpack.hosteurope.de [5.35.232.xxx] >> Jan 6 14:41:03 eroski spamd[11954]: spamd: connection from localhost >> [127.0.0.1] at port 51249 >> Jan 6 14:41:03 eroski spamd[11954]: spamd: creating default_prefs: >> /dev/null/.spamassassin/user_prefs >> Jan 6 14:41:03 eroski spamd[11954]: spamd: failed to create readable >> default_prefs: /dev/null/.spamassassin/user_prefs >> Jan 6 14:41:03 eroski spamd[11954]: spamd: processing message >> <1420551661.54abe5ed54...@www.aldebaran.de> for xnfo:xxx >> Jan 6 14:41:08 eroski spamd[11954]: spamd: identified spam (6.7/5.0) for >> xnfo:xxx in 5.6 seconds, 4802 bytes. >> Jan 6 14:41:08 eroski spamd[11954]: spamd: result: Y 6 - >> BAYES_50,DATE_IN_FUTURE_96_Q,HTML_MESSAGE,T_FILL_THIS_FORM_SHORT,UNPARSEABLE_RELAY,URI_OBFU_WWW,XPRIO >> >> scantime=5.6,size=4802,user=xnfo,uid=xxx,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=51249,mid=<1420551661.54abe5ed54...@www.aldebaran.de>,bayes=0.500000,autolearn=spam >> Jan 6 14:41:08 eroski sm-mta[19601]: t06Df1fZ019601: Milter add: header: >> X-Spam-Flag: YES >> Jan 6 14:41:08 eroski sm-mta[19601]: t06Df1fZ019601: Milter add: header: >> X-Spam-Status: Yes, score=6.7 required=5.0 >> tests=BAYES_50,DATE_IN_FUTURE_96_Q,\n\tHTML_MESSAGE,T_FILL_THIS_FORM_SHORT,UNPARSEABLE_RELAY,URI_OBFU_WWW,XPRIO\n\tautolearn=spam >> version=3.3.2 >> Jan 6 14:41:08 eroski sm-mta[19601]: t06Df1fZ019601: Milter add: header: >> X-Spam-Level: ****** >> Jan 6 14:41:08 eroski sm-mta[19601]: t06Df1fZ019601: Milter add: header: >> X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on >> eroski.aldebaran.de >> Jan 6 14:41:08 eroski sm-mta[19601]: t06Df1fZ019601: Milter change: header >> Content-Type: from multipart/alternative;\n >> boundary="_=_swift_v4_142055166154axxxxxx0ede_=_" to multipart/mixed; >> boundary="----------=_54ABE5F4.1Dxxxxxx" >> Jan 6 14:41:08 eroski sm-mta[19601]: t06Df1fZ019601: Milter message: body >> replaced >> Jan 6 14:41:09 eroski sm-mta[19604]: t06Df1fZ019601: >> to=x...@xxxxxx.aldebaran.de, delay=00:00:07, xdelay=00:00:01, mailer=esmtp, >> pri=37875, relay=xxxxxx.aldebaran.de. [x.x.0.x], dsn=2.0.0, stat=Sent >> (t06Df84L01xxxx Message accepted for delivery) > > It might be informative to set -d ALL to spamass-milter too, just to see > what is going on. > -- aldebaran Programmierung & IT-Lösungen GmbH Softwareentwicklung Individualsoftware mail: i...@aldebaran.de http://www.aldebaran.de Tel: 0511-270 416-0 Fax: 0511-270 416-33 Adresse: Hanomaghof 2 Ort: D-30449 Hannover Geschäftsführung: Ursula (Usch) Wildt - Moritz Both Handelsregister: Amtsgericht Hannover HRB 56 991 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
