Fox,
This looks like an issue stemming from a logical bug in the
preprocessing engine in the Unix agents that got fixed in 2.21, I
believe. The latest version is 2.22 (the razor.sf.net website
says 2.20 unfortunately, but this will be updated shortly), which
can be downloaded from:
http://sourceforge.net/project/showfiles.php?group_id=3978
Please install 2.22 and share your resulting experience.. Thanks
and sorry for the inconvenience..
--jordan
On Wed, Jan 22, 2003 at 03:01:35PM -0500, Fox wrote:
# Okay, both messages are single part. Nothing but text, no multiple mime
# sections. So the -lm 4 and -lm 5 isn't an issue. Here are the debugging
# sessions for each:
#
# Msg #1:
#
# Jan 22 14:55:28.768398 check[4038]: [ 1] [bootup] Logging initiated
# LogDebugLevel=9 to stdout
# Jan 22 14:55:28.768783 check[4038]: [ 5] computed razorhome=/etc/razor,
# conf=, ident=/etc/razor/identity-mckeefoods
# Jan 22 14:55:28.768852 check[4038]: [ 2] Razor-Agents v2.20 starting
# razor-check -d -home=/etc/razor
# Jan 22 14:55:28.770963 check[4038]: [ 9] uname -a: Linux qmail.mckee.com
# 2.4.18-6mdk #1 Fri Mar 15 02:59:08 CET 2002 i686 unknown
# Jan 22 14:55:28.771179 check[4038]: [ 8] reading mbox formatted mail from
# <stdin>
# Jan 22 14:55:28.771437 check[4038]: [ 6] read 1 mail
# Jan 22 14:55:28.771671 check[4038]: [ 8] Client supported_engines: 1 2 3 4
# Jan 22 14:55:28.772106 check[4038]: [ 8] prep_mail done: mail 1
# headers=879, mime0=1778
# Jan 22 14:55:28.772284 check[4038]: [ 6] skipping whitelist file (empty?):
# /etc/razor/razor-whitelist
# Jan 22 14:55:28.772548 check[4038]: [ 5] read_file: 1 items read from
# /etc/razor/servers.discovery.lst
# Jan 22 14:55:28.772715 check[4038]: [ 5] read_file: 3 items read from
# /etc/razor/servers.nomination.lst
# Jan 22 14:55:28.772864 check[4038]: [ 5] read_file: 2 items read from
# /etc/razor/servers.catalogue.lst
# Jan 22 14:55:28.773091 check[4038]: [ 9] Assigning defaults to
# joy.cloudmark.com
# Jan 22 14:55:28.773206 check[4038]: [ 9] Assigning defaults to
# hubris.cloudmark.com
# Jan 22 14:55:28.773310 check[4038]: [ 9] Assigning defaults to
# conceit.cloudmark.com
# Jan 22 14:55:28.773418 check[4038]: [ 9] Assigning defaults to
# truth.cloudmark.com
# Jan 22 14:55:28.773524 check[4038]: [ 9] Assigning defaults to
# shock.cloudmark.com
# Jan 22 14:55:28.773959 check[4038]: [ 5] read_file: 11 items read from
# /etc/razor/server.truth.cloudmark.com.conf
# Jan 22 14:55:28.774263 check[4038]: [ 5] read_file: 12 items read from
# /etc/razor/server.fire.cloudmark.com.conf
# Jan 22 14:55:28.774554 check[4038]: [ 5] read_file: 12 items read from
# /etc/razor/server.honor.cloudmark.com.conf
# Jan 22 14:55:28.774897 check[4038]: [ 5] read_file: 12 items read from
# /etc/razor/server.hubris.cloudmark.com.conf
# Jan 22 14:55:28.775187 check[4038]: [ 5] read_file: 12 items read from
# /etc/razor/server.conceit.cloudmark.com.conf
# Jan 22 14:55:28.775465 check[4038]: [ 5] read_file: 12 items read from
# /etc/razor/server.shock.cloudmark.com.conf
# Jan 22 14:55:28.775743 check[4038]: [ 5] read_file: 12 items read from
# /etc/razor/server.joy.cloudmark.com.conf
# Jan 22 14:55:28.775988 check[4038]: [ 5] 96516 seconds before closest server
# discovery
# Jan 22 14:55:28.776128 check[4038]: [ 6] truth.cloudmark.com is a Catalogue
# Server srl 61; computed min_cf=1, Server se: 0A
# Jan 22 14:55:28.776257 check[4038]: [ 8] Computed supported_engines: 2 4
# Jan 22 14:55:28.776368 check[4038]: [ 8] Using next closest server
# truth.cloudmark.com:2703, cached info srl 61
# Jan 22 14:55:28.776456 check[4038]: [ 8] mail 1 Subject: Re: McKee/Huggins
# Jan 22 14:55:28.777435 check[4038]: [ 6] preproc: mail 1.0 went from 1778
# bytes to 1695
# Jan 22 14:55:28.777506 check[4038]: [ 6] computing sigs for mail 1.0, len
# 1695
# Jan 22 14:55:28.779009 check[4038]: [ 5] Connecting to truth.cloudmark.com
# ...
# Jan 22 14:55:29.057686 check[4038]: [ 8] Connection established
# Jan 22 14:55:29.057789 check[4038]: [ 4] truth.cloudmark.com >> 29 server
# greeting: sn=C&srl=61&ep4=7542-10&a=l
# Jan 22 14:55:29.058000 check[4038]: [ 6] truth.cloudmark.com is a Catalogue
# Server srl 61; computed min_cf=1, Server se: 0A
# Jan 22 14:55:29.058120 check[4038]: [ 8] Computed supported_engines: 2 4
# Jan 22 14:55:29.058254 check[4038]: [ 8] mail 1.0 e2 sig:
# KpFdNLmRxQac3L05cJ3N-6D6cEwA
# Jan 22 14:55:29.058343 check[4038]: [ 8] mail 1.0 e4 sig:
# Nw6vz2PtxSjkEfZBvH7QkZ6b53IA
# Jan 22 14:55:29.058430 check[4038]: [ 8] preparing 2 queries
# Jan 22 14:55:29.058621 check[4038]: [ 8] sending 1 batches
# Jan 22 14:55:29.058744 check[4038]: [ 4] truth.cloudmark.com << 96
# Jan 22 14:55:29.058790 check[4038]: [
# 6] -a=c&e=2&s=KpFdNLmRxQac3L05cJ3N-6D6cEwA
# a=c&e=4&ep4=7542-10&s=Nw6vz2PtxSjkEfZBvH7QkZ6b53IA
# .
# Jan 22 14:55:29.307078 check[4038]: [ 4] truth.cloudmark.com >> 21
# Jan 22 14:55:29.307132 check[4038]: [ 6] response to sent.1
# -p=0
# cf=100&p=1
# .
# Jan 22 14:55:29.307445 check[4038]: [ 6] mail 1.0 e=2
# sig=KpFdNLmRxQac3L05cJ3N-6D6cEwA: sig not found.
# Jan 22 14:55:29.307523 check[4038]: [ 6] mail 1.0 e=4
# sig=Nw6vz2PtxSjkEfZBvH7QkZ6b53IA: Is spam: cf 100 >= min_cf 1
# Jan 22 14:55:29.307614 check[4038]: [ 7] method 4: mail 1.0: no-contention
# part, spam=1
# Jan 22 14:55:29.307711 check[4038]: [ 7] method 4: mail 1: a non-contention
# part was spam, mail spam
# Jan 22 14:55:29.307757 check[4038]: [ 3] mail 1 is known spam.
# Jan 22 14:55:29.307817 check[4038]: [ 5] disconnecting from server
# truth.cloudmark.com
# Jan 22 14:55:29.307926 check[4038]: [ 4] truth.cloudmark.com << 5
# Jan 22 14:55:29.307967 check[4038]: [ 6] a=q
# Jan 22 14:55:29.308116 check[4038]: [ 8] razor-check finished successfully.
#
# Msg #2:
#
# Jan 22 14:57:22.344478 check[4197]: [ 1] [bootup] Logging initiated
# LogDebugLevel=9 to stdout
# Jan 22 14:57:22.344870 check[4197]: [ 5] computed razorhome=/etc/razor,
# conf=, ident=/etc/razor/identity-mckeefoods
# Jan 22 14:57:22.344930 check[4197]: [ 2] Razor-Agents v2.20 starting
# razor-check -d -lm 5 -home=/etc/razor
# Jan 22 14:57:22.347138 check[4197]: [ 9] uname -a: Linux qmail.mckee.com
# 2.4.18-6mdk #1 Fri Mar 15 02:59:08 CET 2002 i686 unknown
# Jan 22 14:57:22.347347 check[4197]: [ 8] reading mbox formatted mail from
# <stdin>
# Jan 22 14:57:22.347609 check[4197]: [ 6] read 1 mail
# Jan 22 14:57:22.347857 check[4197]: [ 8] Client supported_engines: 1 2 3 4
# Jan 22 14:57:22.348295 check[4197]: [ 8] prep_mail done: mail 1
# headers=732, mime0=1542
# Jan 22 14:57:22.348462 check[4197]: [ 6] skipping whitelist file (empty?):
# /etc/razor/razor-whitelist
# Jan 22 14:57:22.348719 check[4197]: [ 5] read_file: 1 items read from
# /etc/razor/servers.discovery.lst
# Jan 22 14:57:22.348893 check[4197]: [ 5] read_file: 3 items read from
# /etc/razor/servers.nomination.lst
# Jan 22 14:57:22.349044 check[4197]: [ 5] read_file: 2 items read from
# /etc/razor/servers.catalogue.lst
# Jan 22 14:57:22.349278 check[4197]: [ 9] Assigning defaults to
# joy.cloudmark.com
# Jan 22 14:57:22.349385 check[4197]: [ 9] Assigning defaults to
# hubris.cloudmark.com
# Jan 22 14:57:22.349492 check[4197]: [ 9] Assigning defaults to
# conceit.cloudmark.com
# Jan 22 14:57:22.349611 check[4197]: [ 9] Assigning defaults to
# truth.cloudmark.com
# Jan 22 14:57:22.349712 check[4197]: [ 9] Assigning defaults to
# shock.cloudmark.com
# Jan 22 14:57:22.350160 check[4197]: [ 5] read_file: 11 items read from
# /etc/razor/server.truth.cloudmark.com.conf
# Jan 22 14:57:22.350473 check[4197]: [ 5] read_file: 12 items read from
# /etc/razor/server.fire.cloudmark.com.conf
# Jan 22 14:57:22.350761 check[4197]: [ 5] read_file: 12 items read from
# /etc/razor/server.honor.cloudmark.com.conf
# Jan 22 14:57:22.351046 check[4197]: [ 5] read_file: 12 items read from
# /etc/razor/server.hubris.cloudmark.com.conf
# Jan 22 14:57:22.351326 check[4197]: [ 5] read_file: 12 items read from
# /etc/razor/server.conceit.cloudmark.com.conf
# Jan 22 14:57:22.351605 check[4197]: [ 5] read_file: 12 items read from
# /etc/razor/server.shock.cloudmark.com.conf
# Jan 22 14:57:22.351883 check[4197]: [ 5] read_file: 12 items read from
# /etc/razor/server.joy.cloudmark.com.conf
# Jan 22 14:57:22.352124 check[4197]: [ 5] 92922 seconds before closest server
# discovery
# Jan 22 14:57:22.352268 check[4197]: [ 6] truth.cloudmark.com is a Catalogue
# Server srl 61; computed min_cf=1, Server se: 0A
# Jan 22 14:57:22.352398 check[4197]: [ 8] Computed supported_engines: 2 4
# Jan 22 14:57:22.352516 check[4197]: [ 8] Using next closest server
# truth.cloudmark.com:2703, cached info srl 61
# Jan 22 14:57:22.352605 check[4197]: [ 8] mail 1 Subject: Re: Re: cookie
# sales
# Jan 22 14:57:22.353551 check[4197]: [ 6] preproc: mail 1.0 went from 1542
# bytes to 1429
# Jan 22 14:57:22.353626 check[4197]: [ 6] computing sigs for mail 1.0, len
# 1429
# Jan 22 14:57:22.355150 check[4197]: [ 5] Connecting to truth.cloudmark.com
# ...
# Jan 22 14:57:22.588089 check[4197]: [ 8] Connection established
# Jan 22 14:57:22.588200 check[4197]: [ 4] truth.cloudmark.com >> 29 server
# greeting: sn=C&srl=61&ep4=7542-10&a=l
# Jan 22 14:57:22.588415 check[4197]: [ 6] truth.cloudmark.com is a Catalogue
# Server srl 61; computed min_cf=1, Server se: 0A
# Jan 22 14:57:22.588540 check[4197]: [ 8] Computed supported_engines: 2 4
# Jan 22 14:57:22.588679 check[4197]: [ 8] mail 1.0 e2 sig:
# PtvWNmBA1R9blj2KhgW2dgvhfQUA
# Jan 22 14:57:22.588766 check[4197]: [ 8] mail 1.0 e4 sig:
# ZSCrYhgYVZpU_mTAO3L8CTxXhl4A
# Jan 22 14:57:22.588854 check[4197]: [ 8] preparing 2 queries
# Jan 22 14:57:22.589048 check[4197]: [ 8] sending 1 batches
# Jan 22 14:57:22.589176 check[4197]: [ 4] truth.cloudmark.com << 96
# Jan 22 14:57:22.589223 check[4197]: [
# 6] -a=c&e=2&s=PtvWNmBA1R9blj2KhgW2dgvhfQUA
# a=c&e=4&ep4=7542-10&s=ZSCrYhgYVZpU_mTAO3L8CTxXhl4A
# .
# Jan 22 14:57:22.743695 check[4197]: [ 4] truth.cloudmark.com >> 21
# Jan 22 14:57:22.743747 check[4197]: [ 6] response to sent.1
# -p=0
# cf=100&p=1
# .
# Jan 22 14:57:22.744073 check[4197]: [ 6] mail 1.0 e=2
# sig=PtvWNmBA1R9blj2KhgW2dgvhfQUA: sig not found.
# Jan 22 14:57:22.744149 check[4197]: [ 6] mail 1.0 e=4
# sig=ZSCrYhgYVZpU_mTAO3L8CTxXhl4A: Is spam: cf 100 >= min_cf 1
# Jan 22 14:57:22.744241 check[4197]: [ 7] method 5: mail 1.0: no-contention
# part, spam=1
# Jan 22 14:57:22.744374 check[4197]: [ 7] method 5: mail 1: all
# non-contention parts spam, mail spam
# Jan 22 14:57:22.744421 check[4197]: [ 3] mail 1 is known spam.
# Jan 22 14:57:22.744481 check[4197]: [ 5] disconnecting from server
# truth.cloudmark.com
# Jan 22 14:57:22.744593 check[4197]: [ 4] truth.cloudmark.com << 5
# Jan 22 14:57:22.744635 check[4197]: [ 6] a=q
# Jan 22 14:57:22.744788 check[4197]: [ 8] razor-check finished successfully.
#
#
#
#
# -------------------------------------------------------
# This SF.net email is sponsored by: Scholarships for Techies!
# Can't afford IT training? All 2003 ictp students receive scholarships.
# Get hands-on training in Microsoft, Cisco, Sun, Linux/UNIX, and more.
# www.ictp.com/training/sourceforge.asp
# _______________________________________________
# Razor-users mailing list
# [EMAIL PROTECTED]
# https://lists.sourceforge.net/lists/listinfo/razor-users
msg00571/pgp00000.pgp
Description: PGP signature
