Hello Kevin, Thanks for your hint. Yes it seemed to be caused by the DNS cache. Resetting it solved the problem for the user. However wouldn’t it be better to give a proper warning in such a case? It’s really strange that a content like “(” is passed to “lookup_dnsbl_for_ip”. Shoudn’t that be avoided? I suggest to validate the extracted content to match some IP criteria before trying to parse the sub parts. And if the content does not match a proper warning with a possible solution suggestion should be formulated, like “….it may be caused by DNS cache issues, please reset your DNS cache”.
Greetings Harald Von: Kevin A. McGrail [mailto:[email protected]] Gesendet: Montag, 28. März 2016 22:08 An: Support SpamAssassin <[email protected]> Betreff: Re: AW: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042. My thought is some reason SpamHaus is returning a bad query. Rate limit or problem? Can you manually query and see what's returned? Are you using a local caching nameserver? Regards, KAM On 3/24/2016 4:28 AM, Support SpamAssassin wrote: Hello Kevin, Yes, all occurrences we know are related to spamhaus. And it does not happen for all messages. It only triggered by some messages. One user gets the warnings for one kind of newsletter: Here are the headers: Return-Path: [email protected]<mailto:[email protected]> Delivered-To: [email protected]<mailto:[email protected]> X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on WIN-2012-STD-R2 X-Spam-Level: X-Spam-Status: No, score=-200.0 required=4.0 tests=SHORTCIRCUIT,SPF_PASS, T_RP_MATCHES_RCVD,USER_IN_DKIM_WHITELIST,USER_IN_SPF_WHITELIST shortcircuit=ham autolearn=disabled version=3.4.1 Received: from webgrida091.emsecure.net (webgrida091.emsecure.net [176.62.161.91]) by ip3e832edd.speed.planet.nl with ESMTP ; Wed, 23 Mar 2016 05:06:36 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=XXX.YY; s=kruidvat2; x=1459310741; [email protected]<mailto:[email protected]>; h=from:to:subject:date:reply-to: message-id:feedback-id:list-id:mime-version:content-type; bh=ho/ Wx9zGzVzETt82nkA81DgjtokN8SVi0uvjJ2fNuBA=; b=rRHKZkm4kVvrHPWmUVy 8sCL/+mST0lW3LQ/rj8g2zO6dAybic6xL553nmdMbx5BgT8RaA8jR3EbB7eAthnx OTCXvXqSqS1WoNE9716JZTe4qzvl6T+mfcyKxmYt1XTlQFjUoEnKx+FP/RzrzXXT 9UjB0fWSqKLC72YSXqWP1NYQ= From: "ZZZZZ" <[email protected]><mailto:[email protected]> To: "AAAA" <[email protected]><mailto:[email protected]> Subject: =?utf-8?B?TWFhayBrYW5zIG9wIDEgdmFuIGRlIA==?= =?utf-8?B?NCBob3RlbGJvbm5lbiB0Lncudi4gMQ==?= =?utf-8?B?MDAgZXVybyEgLyBOdSBTYW5kZXJzIA==?= =?utf-8?B?cHV6emVsYm9la2plcyB2b29yIOKCrDAs?= =?utf-8?B?OTkh?= Date: Wed, 23 Mar 2016 04:05:41 +0000 Reply-To: "ZZZZZ" <[email protected]><mailto:[email protected]> Message-ID: <PATT3L72_10540129_geSq81nq1r8HCKphZ5apUg==.8...@webgrida091.emsecure.net><mailto:PATT3L72_10540129_geSq81nq1r8HCKphZ5apUg==.8...@webgrida091.emsecure.net> X-GRID-REF: 8A66B7582E9A48E5AC85DC32E810B6FA.PATT3L72_10540129_geSq81nq1r8HCKphZ5apUg== X-MA-Reference: SIM_6t56DwaphLeh9eDDgNzQmeFjJs30tArE6RJwjaJWSTqS6I26H X-MA-Instance: SIM_6t56DwaphLeh9eDDgNzQmeFjJs30tArE6RJwjaJWSTqS6I26H.5143a42bcb29458511d1f6387d094716 Feedback-ID: 72:4871:10540129:R1CHPATT3L List-ID: <181.4871.XXX.YY> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="_NexPart_001_" Any idea? Best regards, Harald Binkle Von: Kevin A. McGrail [mailto:[email protected]] Gesendet: Mittwoch, 23. März 2016 17:01 An: Support SpamAssassin <[email protected]><mailto:[email protected]>; [email protected]<mailto:[email protected]> Betreff: Re: warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042. Is it only happening with spamhaus? Regards, KAM On March 23, 2016 5:26:20 AM EDT, Support SpamAssassin <[email protected]<mailto:[email protected]>> wrote: Hi, since we released our new SpamAssassin for Windows we get some reports of users having these warnings in their spamd log: Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $4 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042. Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $3 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042. Thu Mar 17 11:31:21 2016 [-2876] warn: Use of uninitialized value $2 in concatenation (.) or string at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1042. Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.sbl.spamhaus.org. type=A class=IN) failed: a domain name contains a null label Thu Mar 17 11:31:21 2016 [-2876] warn: dns: new_dns_packet (domain=...(.zen.spamhaus.org. type=A class=IN) failed: a domain name contains a null label We put an additional warn line into URIDNSBL.pm telling the content of $ip. è It is “(” Thu Mar 17 11:31:21 2016 [-2876] warn: uridnsbl: lookup_dnsbl_for_ip $ip: ( at Mail/SpamAssassin/Plugin/URIDNSBL.pm line 1039. It looks like an parsing problem of SpamAssassin. Un fortunately I’m not able to reproduce it. However does anyone have an idea how this bracket may get into the variable? Best regards, Harald Binkle ________________________________ -------------------------------------------------------- JAM Software GmbH Managing Director: Joachim Marder Am Wissenschaftspark 26 * 54296 Trier * Germany Phone: +49 (0)651-145 653 -0 * Fax: +49 (0)651-145 653 -29 Commercial register number HRB 4920 (AG Wittlich) http://www.jam-software.com ________________________________ ---------------------------------------------------- JAM Software GmbH Geschäftsführer: Joachim Marder Am Wissenschaftspark 26 * 54296 Trier * Germany Tel: 0651-145 653 -0 * Fax: 0651-145 653 -29 Handelsregister Nr. HRB 4920 (AG Wittlich) http://www.jam-software.de -- Kevin A. McGrail CEO Peregrine Computer Consultants Corporation 3927 Old Lee Highway, Suite 102-C Fairfax, VA 22030-2422 http://www.pccc.com/ 703-359-9700 x50 / 800-823-8402 (Toll-Free) 703-798-0171 (wireless) [email protected]<mailto:[email protected]> [cid:[email protected]]
