[Pkg-dspam-misc] Bug#644392: dspam truncates mail

[Stevan Bajić]

On 01.11.2011 20:57, Laurence Withers wrote:
> On Fri, Oct 07, 2011 at 08:46:04AM +0200, Stevan Bajić wrote:
>> Do you have the original mail (the 6Kb version) somewhere? In raw
>> format? Can you send it to me or post a link to it or attach it to
>> this bug report?
> Dear Stevan,
Hello Laurence,

> I have finally managed to track down a raw copy of the mail, which I have
> attached.
thanks. I have already started to look at the file. I don't get that 
6.2Kb size here with the original file but who knows what Exim did to 
the original mail to get about 2Kb more in size than the file you have 
attached? From the past I know that Exim has (had) issues with 8bit 
messages and transformed them into 7bit. Anyway... that original size is 
not the problem.

> I don't believe there is a way to check the size of the mail when exim
> delivers it to dspam, unfortunately
Okay.

> Bye for now,
Looking now more closer to the original message you wrote.... I realize 
that the message got truncated before the dot. Usually that kind of 
stuff happens if the dot is the first character and it is not properly 
escaped (dot stuffing. See 
http://tools.ietf.org/html/rfc2821#section-4.5.2). But that dot in your 
message is at the end of the line. Somehow I can not believe that it is 
dot stuffing issue. But who knows? It looks like and it smells like a 
dot stuffing issue.

So there are IMHO two possible scenarios (if it is dot stuffing):
1) Exim get's the mail correctly and does not make proper dot stuffing 
when sending it to DSPAM (very unlikely since you use pipe delivery and 
not SMTP)
2) DSPAM got it properly from Exim and has an issue when sending it back 
to Exim

Unfortunately I don't have Exim over here and any test I did, did not 
result in a truncation. Can you on your end try to send that mail again 
into your Exim MTA and look what is happening? Maybe you have the 
possibility to turn on more verbose logging?

Can you try to (keep in mind that the message will show up on the 
original date (aka 05.10.2011) in your inbox):
cat /path/to/the/raw/message/you/sent/me | sendmail -oi l at lwithers.me.uk

Do you still see the message being truncated?

Can you try to look what DSPAM would do with the message?
dspam --user l at lwithers.me.uk --mode=notrain --process --deliver=stdout 
< /path/to/the/raw/message/you/sent/me

Do you see the whole message or do you see a truncation? (I assume no 
truncation because it is a delivery to stdout and not to a SMTPD).

Could you post your dspam.conf so that we can see what and how you use 
the delivery agent inside DSPAM?



-- 
Kind Regards from Switzerland,

Stevan Bajić