PB Bug cause SMTP session to be closed after DATA is being sent.

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

PB Bug cause SMTP session to be closed after DATA is being sent.

Raman
ASSP 1.3.1 (44)

For several days we have tried to debug strange issue, while ASSP accepted message it wasn't processed by Exim with "lost while reading message data (header)" error.

We had PB in the Test Mode (it is important!).

After some investigation we found that while IP accepted because PB was in Test Mode session was terminated by ASSP.

Here is the part of ASSP maillog:

Apr-16-07 23:28:06 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com Received-RWL: not listed (ASSP.at.vega.***.com: local policy) rwl=none; client-ip=70.84.**.**
Apr-16-07 23:28:06 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com Received-SPF: pass (ASSP.at.vega.***.com: message received from 70.84.**.** which is an MX secondary for admin@***.com) client-ip=70.84.**.**; envelope-from=root@merak.***.com; helo=merka.***.com;
Apr-16-07 23:28:06 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com RBL: Received-RBL: pass
Apr-16-07 23:28:14 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com Received-URIBL: pass
Apr-16-07 23:28:14 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com passing if safe because testmode, otherwise Penalty - score:22600 (LimitingIPFrequency)
Apr-16-07 23:28:14 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com spam determined to be safe, passing on to recipient
Apr-16-07 23:28:14 67552638 70.84.**.** <root@merak.***.com> to: admin@***.com is disconnected

And Exim mainlog:
2007-04-16 23:28:14 SMTP connection from localhost (merka.***.com) [127.0.0.1]:36570 I=[127.0.0.1]:125 lost while reading message data (header)

As you may see IP 70.84.**.** was "able" to get into PB list in past because of scoring (it is another story), but according to the fact ASSP run PB in Test Mode it should be passed with no problems. Actually it doesn't.

We have resolved it by temporary putting IP at ipwl.txt list to whitelist it and after ASSP removed IP from block list emails started to get processed by Exim as ASSP no longer cut connection.

It is definitely a bug, because with Test Mode in place IPs from PB blacklist should not be blocked.

Hope to hear response from you and a fix.