Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - SPF process got in a loop last night
  FAQ FAQ  Forum Search   Register Register  Login Login

SPF process got in a loop last night
 Post Reply Post Reply
Author
  Topic Search Topic Search  Topic Options Topic Options
Terry View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Topic: SPF process got in a loop last night
    Posted: 16 September 2004 at 9:53am

Last night the spamfilterisp program appears to have gotten in a loop processing SPF records for a connection.  When I came in this morning I found that from 22:57pm to 6:30am or so the system was looping processing what appeared to be the same spf records.  My suspicion is that the email source has something wrong with their setup but I wonder if someone there can look at this and see what happenned.

Here is the start of the log going bad...from then on it just continues through the night the same...sorry about the line wrap...Terry

09/15/04 22:57:40:871 -- (3440) Connection from: 80.53.205.10  -  Originating country : Poland
09/15/04 22:57:42:152 -- (3440) Resolving 80.53.205.10 - bv10.internetdsl.tpnet.pl
09/15/04 22:57:42:246 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:543 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:636 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:652 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:668 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:668 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:683 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:699 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:715 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:730 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:746 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:761 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:777 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:793 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:808 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:824 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:840 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:855 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:871 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:886 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:902 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:918 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:933 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:949 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all
09/15/04 22:57:42:949 -- (3440) - SPF analysis done: - fail
09/15/04 22:57:43:074 -- (3440) - SPF record found. analyzing: - v=spf1 mx ip4:66.28.139.0/24 ip4:66.98.160.93 ip4:66.98.248.20 ip4:207.246.86.0/25 ip4:208.239.240.102 ip4:208.239.240.73 include:newsletterinc.com include:squabblers.com include:newsletterplanet.com include:nichenewsletters.com -all

 
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106 		Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 16 September 2004 at 11:44pm
Terry,

Can you please let us know what build you're using? There was a similar problem with builds prior to  2.1.1.372, the released notes for the fixes are the following:

// New to VersionNumber = '2.1.1.375';
{TODO -cFix : Faster SPF queries when exceeding max include loops, better handling of default value}

// New to VersionNumber = '2.1.1.372';
{TODO -cFix : SPF - fixed issue with logfile becoming huge due to loops in SPF include directive}

Roberto F.
LogSat Software
Back to Top
Terry View Drop Down
Senior Member
Senior Member


Joined: 06 February 2005
Status: Offline
Points: 155 		Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Posted: 17 September 2004 at 9:36am

We are on release 2.1.1.367.   Looks like we need to upgrade?

I see that the official release is still 2.1.1.367....and that the others are pre-release.  What release do you recommend we go to and what is the risk to us to go to a pre-release build?
Back to Top
fclass View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote fclass Quote  Post ReplyReply Direct Link To This Post Posted: 17 September 2004 at 11:47am
Same thing happened to us, same address your getting as well. We are also on the same build since its the latest stable release. All this started last night, just thought I'd add the comment to let you know others are getting this as well. 
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4106 		Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 17 September 2004 at 9:49pm
Terry,

Pre-release builds have not been tested thoroughly. The latest pre-release build is 2.1.1.380, and most likely this weekend we'll be releasing officially build 384, which fixes a minor issue (the welcome banner not displaying the fully qualified server name) and adds better handling of errors while saving virus infected files.

Roberto F. LogSat Software
Back to Top
Terry View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Terry Quote  Post ReplyReply Direct Link To This Post Posted: 19 September 2004 at 10:37pm

I have installed the new release made available Saturday.  Everything seems good so far so and no more loops since upgrade.

Terry
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.375 seconds.

Copyright (c)2002-2025 LogSat Software LLC - Sales: sales@LogSat.com
Contact Us