Matt Kettler wrote:
At 02:52 PM 3/3/2005, Matias Lopez Bergero wrote:

Insecure dependency in connect while running with -T switch at /usr/lib/perl5/5.8.0/i386-linux-thread-multi/IO/Socket.pm line 114.

I have read trough the wiki and found something similar but related to razor and SA 2.6 with a patch, but I have no problems reporting spam with razor2 and I'm using SA 3.

Setup: Linux 2.4, SA 3.0.2, sendmail 8.13, milter-spamc 0.25, Razor Agents 2.67, Pyzor 0.4.0 and DCC 1.2.69.


Well, the classic razor issue never happened when you used razor-report, only when you tried to use razor in SA. Razor doesn't use taint mode when you run it directly, but SA runs everything in taint mode for security..

However, that issue shouldn't be a problem with razor's that are at all recent (ie: 2.6.* and even a few before that).

Yes, it's happening now. I run SA -r wen I was testing the report with out problems.


1) is there ANY chance you have multiple razor agents on your machine, one old, one new?

nup. I've installed this version of razor from source.

2) Did you get any other output near the insecure dependency that might help trace where Socket.pm was called from?

The output says that the spam was reported to razor, and error message appears below it.


[...]
Mar 04 11:55:05.838064 report[12760]: [ 8] mail 1.1, eng 4: err 230 - server wants mail
Mar 04 11:55:05.838249 report[12760]: [ 8] mail 1.2, eng 4: err 230 - server wants mail
Mar 04 11:55:05.839438 report[12760]: [ 8] preparing 1 queries
Mar 04 11:55:05.840245 report[12760]: [ 8] sending 1 batches
Mar 04 11:55:05.840668 report[12760]: [ 4] joy.cloudmark.com << 63824
Mar 04 11:55:05.841224 report[12760]: [ 6] [length=63824] -a=r&message=*
Mar 04 11:55:07.907528 report[12760]: [ 4] joy.cloudmark.com >> 7
Mar 04 11:55:07.907667 report[12760]: [ 6] response to sent.5
res=1
Mar 04 11:55:07.908018 report[12760]: [ 5] report: mail 1, 0: Server accepted report.
Mar 04 11:55:07.908148 report[12760]: [ 3] Sent report.
Mar 04 11:55:07.908273 report[12760]: [ 5] disconnecting from server joy.cloudmark.com
Mar 04 11:55:07.908458 report[12760]: [ 4] joy.cloudmark.com << 5
Mar 04 11:55:07.908554 report[12760]: [ 6] a=q
debug: Razor2: spam report, response is "1".
debug: leaving helper-app run mode
debug: SpamAssassin: spam reported to Razor.
1 message(s) examined.
Insecure dependency in connect while running with -T switch at /usr/lib/perl5/5.8.0/i386-linux-thread-multi/IO/Socket.pm line 114.



BR, Mat�as.




Reply via email to