Hi
mail from one IP-addess ends up with the Workerthread hangs/loops,
this happens on both my SMTP assp relays ,
as this seems to be spam a fast solution was to add this address to
[denySMTPConnectionsFromAlways]
Loggfile
Apr-19-10 21:22:11 [Worker_5] IP 69.72.228.74 matches debugIP
Apr-19-10 21:22:11 [Worker_5] Connected: 69.72.228.74:39009 >
xxx.xxx.145.201:25 > xxx.xxx.145.199:125
Apr-19-10 21:22:12 [Worker_5] LDAP - found info@... in LDAPlist
Apr-19-10 21:25:25 [Main_Thread] Info: Loop in Worker_5 was not active for
188 seconds
Apr-19-10 21:25:25 [Main_Thread] Info: Worker_5 : last sigoff in main,
assp.pl, 9211, main::sigoffTry, 1, , , at 11 21:2217 1271704937.90262 -
9211
Apr-19-10 21:25:25 [Main_Thread] Info: Worker_5 : last sigon in main,
assp.pl, 9213, main::sigonTry, 1, , , at 11 21:2217 1271704937.90273 -
9213
Apr-19-10 21:25:25 [Main_Thread] Info: Worker_5 : last action was :
returned from ThreadGetNe
Apr-19-10 21:25:26 [Main_Thread] Info: Loop in Worker_5 was not active for
189 seconds
DEBUG output from ipaddress 69.72.228.74
Apr-19-10 21:22:11 [Worker_5] <addfh
>Apr-19-10 21:22:11 [Worker_5] <addfh
>Apr-19-10 21:22:11 [Worker_5] <Connected:
IO::Socket::INET=GLOB(0xaecbee10) -- IO::Socket::INET=GLOB(0xaef904b8)
>Apr-19-10 21:22:11 [Worker_5] <* connect ip=69.72.228.74 relay=<0> *
>Apr-19-10 21:22:11 [Worker_5] Connected: 69.72.228.74:39009 >
xxx.xxx.145.201:25 > xxx.xxx.145.199:125
Apr-19-10 21:22:11 [Worker_5] <rh: 2 - read: 1 - wait: 0.002
>Apr-19-10 21:22:11 [Worker_5] <wh: 2 - write: 2 - wait: 0.002
>Apr-19-10 21:22:11 [Worker_5] <IO::Socket::INET=GLOB(0xaef904b8)
HASH(0xae4b8968) l=0
>Apr-19-10 21:22:11 [Worker_5] <IO::Socket::INET=GLOB(0xaecbee10)
HASH(0xaf0e8300) l=0
>Apr-19-10 21:22:11 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:11 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:11 [Worker_5] <doing line <220 smtpout02.company.se ESMTP
MailMarshal (v6.7.2.8378) Ready[CR][LF]
>
>Apr-19-10 21:22:11 [Worker_5] <reply
>Apr-19-10 21:22:11 [Worker_5] <reply : 220 smtpout02.company.se ESMTP
MailMarshal (v6.7.2.8378) Ready[CR][LF]
>Apr-19-10 21:22:11 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaef904b8) l=0
>Apr-19-10 21:22:11 [Worker_5] <noop to server 1
>Apr-19-10 21:22:11 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaecbee10) l=64
>Apr-19-10 21:22:11 [Worker_5] <IO::Socket::INET=GLOB(0xaef904b8)
HASH(0xae4b8968) l=0
>Apr-19-10 21:22:11 [Worker_5] <IO::Socket::INET=GLOB(0xaecbee10)
HASH(0xaf0e8300) l=64
>Apr-19-10 21:22:11 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaecbee10)
(64)<220 smtpout02.company.se ESMTP MailMarshal (v6.7.2.8378)
Ready[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:12 [Worker_5] <doing line <EHLO
cpanel.rem-graphics.com[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <getline
>Apr-19-10 21:22:12 [Worker_5] <gl: <EHLO cpanel.rem-graphics.com[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <headerWrap
>Apr-19-10 21:22:12 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaef904b8) l=30
>Apr-19-10 21:22:12 [Worker_5] <IO::Socket::INET=GLOB(0xaef904b8)
HASH(0xae4b8968) l=30
>Apr-19-10 21:22:12 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaef904b8)
(30)<EHLO cpanel.rem-graphics.com[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:12 [Worker_5] <doing line <250-smtpout02.company.se Hello
cpanel.rem-graphics.com (xxx.xxx.145.201)[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <reply
>Apr-19-10 21:22:12 [Worker_5] <reply : 250-smtpout02.company.se Hello
cpanel.rem-graphics.com (xxx.xxx.145.201)[CR][LF]
>Apr-19-10 21:22:12 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaecbee10) l=74
>Apr-19-10 21:22:12 [Worker_5] <doing line <250 SIZE[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <reply
>Apr-19-10 21:22:12 [Worker_5] <reply : 250 SIZE[CR][LF]
>Apr-19-10 21:22:12 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaecbee10) l=10
>Apr-19-10 21:22:12 [Worker_5] <IO::Socket::INET=GLOB(0xaecbee10)
HASH(0xaf0e8300) l=84
>Apr-19-10 21:22:12 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaecbee10)
(84)<250-smtpout02.company.se Hello cpanel.rem-graphics.com
(xxx.xxx.145.201)[CR][LF]
250 SIZE[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:12 [Worker_5] <doing line <MAIL
FROM:<ral@...> SIZE=12607[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <getline
>Apr-19-10 21:22:12 [Worker_5] <gl: <MAIL FROM:<ral@...>
SIZE=12607[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <localmail - ral@...
>Apr-19-10 21:22:12 [Worker_5] <localdomains - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <localLDAPdomain - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <ForgedHeloOK
>Apr-19-10 21:22:12 [Worker_5] <IPinHeloOK
>Apr-19-10 21:22:12 [Worker_5] <invalidHeloOK
>Apr-19-10 21:22:12 [Worker_5] <BombWeight - invalidFormatHeloRe
>Apr-19-10 21:22:12 [Worker_5] <validHeloOK
>Apr-19-10 21:22:12 [Worker_5] <LocalSenderOK
>Apr-19-10 21:22:12 [Worker_5] <localmail - ral@...
>Apr-19-10 21:22:12 [Worker_5] <localdomains - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <localLDAPdomain - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <NoSpoofingOK
>Apr-19-10 21:22:12 [Worker_5] <localmail - ral@...
>Apr-19-10 21:22:12 [Worker_5] <localdomains - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <localLDAPdomain - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <RBLCacheOK
>Apr-19-10 21:22:12 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaef904b8) l=45
>Apr-19-10 21:22:12 [Worker_5] <IO::Socket::INET=GLOB(0xaef904b8)
HASH(0xae4b8968) l=45
>Apr-19-10 21:22:12 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaef904b8)
(45)<MAIL FROM:<ral@...> SIZE=12607[CR][LF]
>
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:12 [Worker_5] <doing line <250 sender ok
<ral@...]
>
>Apr-19-10 21:22:12 [Worker_5] <reply
>Apr-19-10 21:22:12 [Worker_5] <reply : 250 sender ok
<ral@...]
>Apr-19-10 21:22:12 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaecbee10) l=38
>Apr-19-10 21:22:12 [Worker_5] <IO::Socket::INET=GLOB(0xaecbee10)
HASH(0xaf0e8300) l=38
>Apr-19-10 21:22:12 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaecbee10)
(38)<250 sender ok <ral@...]
>
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:12 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:12 [Worker_5] <doing line <RCPT
TO:<info@...]
>
>Apr-19-10 21:22:12 [Worker_5] <getline
>Apr-19-10 21:22:12 [Worker_5] <gl: <RCPT TO:<info@...]
>
>Apr-19-10 21:22:12 [Worker_5] <localmail - companyrcpt.it
>Apr-19-10 21:22:12 [Worker_5] <localdomains - companyrcpt.it
>Apr-19-10 21:22:12 [Worker_5] <localmail - ral@...
>Apr-19-10 21:22:12 [Worker_5] <localdomains - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <localLDAPdomain - ricambilongo.com
>Apr-19-10 21:22:12 [Worker_5] <LDAPCacheFind - info@... , LDAP
>Apr-19-10 21:22:12 [Worker_5] LDAP - found info@... in
LDAPlist
Apr-19-10 21:22:12 [Worker_5] <LDAP - found info@... in
LDAP-cache
>Apr-19-10 21:22:12 [Worker_5] <info@... validated by
ldapcache[LF]
>Apr-19-10 21:22:12 [Worker_5] <serverIsSmtpDestination
>Apr-19-10 21:22:12 [Worker_5] <Delayok
>Apr-19-10 21:22:12 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaef904b8) l=25
>Apr-19-10 21:22:12 [Worker_5] <IO::Socket::INET=GLOB(0xaef904b8)
HASH(0xae4b8968) l=25
>Apr-19-10 21:22:12 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaef904b8)
(25)<RCPT TO:<info@...]
>
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:17 [Worker_5] <doing line <250 recipient ok
<info@...]
>
>Apr-19-10 21:22:17 [Worker_5] <reply
>Apr-19-10 21:22:17 [Worker_5] <reply : 250 recipient ok
<info@...]
>Apr-19-10 21:22:17 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaecbee10) l=34
>Apr-19-10 21:22:17 [Worker_5] <IO::Socket::INET=GLOB(0xaecbee10)
HASH(0xaf0e8300) l=34
>Apr-19-10 21:22:17 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaecbee10)
(34)<250 recipient ok <info@...]
>
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:17 [Worker_5] <doing line <DATA[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getline
>Apr-19-10 21:22:17 [Worker_5] <gl: <DATA[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <NumRcptOK
>Apr-19-10 21:22:17 [Worker_5] <MaillogStart
>Apr-19-10 21:22:17 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaef904b8) l=6
>Apr-19-10 21:22:17 [Worker_5] <IO::Socket::INET=GLOB(0xaef904b8)
HASH(0xae4b8968) l=6
>Apr-19-10 21:22:17 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaef904b8)
(6)<DATA[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:17 [Worker_5] <doing line <354 send the mail data, end
with .[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <reply
>Apr-19-10 21:22:17 [Worker_5] <reply : 354 send the mail data, end with
.[CR][LF]
>Apr-19-10 21:22:17 [Worker_5] <reply - 354
>Apr-19-10 21:22:17 [Worker_5] <sq: IO::Socket::INET=GLOB(0xaecbee10) l=36
>Apr-19-10 21:22:17 [Worker_5] <IO::Socket::INET=GLOB(0xaecbee10)
HASH(0xaf0e8300) l=36
>Apr-19-10 21:22:17 [Worker_5] <wrote: IO::Socket::INET=GLOB(0xaecbee10)
(36)<354 send the mail data, end with .[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - read OK
>Apr-19-10 21:22:17 [Worker_5] <SMTPTraffic - process read
>Apr-19-10 21:22:17 [Worker_5] <doing line <Received: from localhost
([127.0.0.1] helo=cpanel.rem-graphics.com)[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line < by cpanel.rem-graphics.com
with esmtpa (Exim 4.69)[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line < (envelope-from
<ral@...]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line < id
1O3nWV-0007iR-2q[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line < for info@...;
Mon, 19 Apr 2010 11:44:11 +0200[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <Received: from ral-patri
([93.51.97.42] helo=ral-patri) with IPv4:25 by[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line < cpanel.rem-graphics.com;
19 Apr 2010 11:44:06 +0200[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <MIME-Version: 1.0[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <Message-Id:
<sig.9725b61c63.4BCC25E8.00000F.02604@...]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <Date: Mon, 19 Apr 2010
11:44:08 +0200 (ora legale Europa occidentale)[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <Content-Type:
Multipart/related;[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line < charset="iso-8859-1";[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <
type="multipart/alternative";[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <
boundary="------------Boundary-00=_K1B4SPT1VA4000000000"[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-Mailer: IncrediMail
(5864189)[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <From: "Ricambi Autotreni Longo
snc" <ral@...]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-FID:
3CC323E2-43F5-4DFF-B5F7-0D8FA0E3C6DB[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-Priority: 3[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <To:
<info@...]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <Subject: CONFERMA
ORDINE[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <Disposition-Notification-To:
"Ricambi Autotreni Longo snc" <ral@...]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-Assp-ID:
cpanel.rem-graphics.com ()[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-Assp-Version:
1.7.1.3(1.0.0)[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-AntiAbuse: This header was
added to track abuse, please include it with any abuse report[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-AntiAbuse: Primary Hostname
- cpanel.rem-graphics.com[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-AntiAbuse: Original Domain -
companyrcpt.it[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-AntiAbuse: Originator/Caller
UID/GID - [47 12] / [47 12][CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <X-AntiAbuse: Sender Address
Domain - ricambilongo.com[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <doing line <[CR][LF]
>
>Apr-19-10 21:22:17 [Worker_5] <getheader
>Apr-19-10 21:22:17 [Worker_5] <MailLoopOK
>Apr-19-10 21:23:01 [Worker_5] <interrupted
>Apr-19-10 21:23:01 [Worker_5] <interrupted - data from MainThread
>Apr-19-10 21:23:01 [Worker_5] <NewSMTPConnectionConnect
>
_________________________________________________________________________________________________________________________________________________
NOTICE: This email and any attachments are for the sole use of the intended recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution is prohibited.
If you are not the intended recipient, please notify the sender by reply email and destroy the original message.
|