[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: Spam eml hangs sa
From:       John Hardin <jhardin () impsec ! org>
Date:       2017-06-20 0:54:59
Message-ID: alpine.LNX.2.00.1706191752320.23811 () athena ! impsec ! org
[Download RAW message or body]

On Mon, 19 Jun 2017, John Hardin wrote:

> On Mon, 19 Jun 2017, Reindl Harald wrote:
>
>>  Am 18.06.2017 um 19:56 schrieb John Hardin:
>> >   On Sat, 17 Jun 2017, John Hardin wrote:
>> > 
>> > >   On Fri, 16 Jun 2017, John Hardin wrote:
>> > > 
>> > > >    On Fri, 16 Jun 2017, John Hardin wrote:
>> > > > 
>> > > > >     On Fri, 16 Jun 2017, Olivier Coutu wrote:
>> > > > > > >      The problematic rule is __STYLE_GIBBERISH_1. Disabling it 
>> > > >   fixes the > >    issue.
>> > > > > > > >      I have already advised jhardin, who wrote the rule.
>> > > > > >     I apologize I didn't get a chance to look at it yesterday, I 
>> > > >   had a >   *very*
>> > > > >     long day at $WORK.
>> > 
>> >   OK, the fix is confirmed to be in the latest update
>>
>>  not really at least not with the message from
>>  https://1fichier.com/?jpqjmsfxkf
>
> Actually, it is:
>
> Jun 19 16:51:27.363 [10959] dbg: rules: [...] __STYLE_GIBBERISH_1 0.0011 
> 0.0011 1 0.00%
>
> That message is causing problems with the FILL_FORM rules. I will take a look 
> at those too.

It looks like this may be partly due to a bug in the SA HTML parser. That 
message has Content-Type: text/html but the contents of the style tag are 
being read into the message body pool. The FILL_THIS_FORM rules shouldn't 
be scanning HTML markup.


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Where are my space habitats? Where is my flying car?
   It's 2010 and all I got from the SF books of my youth
   is the lousy dystopian government.                      -- perlhaqr
-----------------------------------------------------------------------
  81 days since the first commercial re-flight of an orbital booster (SpaceX)
[prev in list] [next in list] [prev in thread] [next in thread]