env_From incrementing

On 12/8/05 at 10:36 PM, vjs@calcite.rhyolite.com wrote:

>>> What `dccm -t` thresholds are you using?
>>> Are you using DCCM_REJECT_AT in /var/dcc/dcc_conf?

>> I'm not using a -t argument and am using DCCM_REJECT_AT in the
>> config file. It is set to 10, which I know is very low, but it's
>> been that way for a long time.

> Are you sure the DCCM_REJECT_AT=10 and so `dccm -tCMN,,10` has
> anything to do with rejecting mail that has large env_From values?
> Could the rejections be due to something else?
> Does the X-DCC header say "bulk" and if so, are all of the totals
> except env_From less than 10?

I am not sure, but it does seem that way (this output has been 
wrapped):

# for i in $(grep -l kailacat msg.*) ; do grep "^X-DCC" $i ; done
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=12 Body=1
  Fuz1=1 Fuz2=1
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=13 Body=1
  Fuz1=1 Fuz2=1
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=7 Body=2
  Fuz1=2 Fuz2=2
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=8 Body=1
  Fuz1=1 Fuz2=1
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=9 Body=1
  Fuz1=1 Fuz2=1
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=10 Body=2
  Fuz1=2 Fuz2=2
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=11 Body=1
  Fuz1=1 Fuz2=1
X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=14 Body=1
  Fuz1=1 Fuz2=1

> Could the rejections be due to something else?
> Does the X-DCC header say "bulk" and if so, are all of the totals
> except env_From less than 10?

As above, yes. In the example messages, all the other checksums (IP, 
From, substitute helo, Message-ID, Received) are null, as in this 
one:

X-DCC-NIET-Metrics: is1.gstype.com 1080; bulk env_From=14 Body=1
  Fuz1=1 Fuz2=1
                         reported: 1               checksum  server
                    IP: a37504f9 81ef476c 34842bc9 65b7060a
              env_From: 070d67f5 175c2605 92be632c 27bff934      13
                  From: d7092551 af1ee454 d0cf6b6a 61a125d6
       substitute helo: dd11ec78 db9a2a0d 50b7f37e 2a7c6c2d
            Message-ID: c7154f61 968d369f c8f8e4c6 8cf94977
              Received: 5d3d8e25 052fa7a4 a8e0e127 9c0f30fb
                  Body: f66afb20 68f30ab1 3d93dbb6 36c86295       0
                  Fuz1: cc19f99f 17fddb1e 22fe199f 41c2e3d5       0
                  Fuz2: 86f47899 ec12f1c8 548c15ad f683a94f       0

rejection message: 550 5.7.1 Bulk mail rejected: please see
  <http://www.gstype.com/email.html>.
result: reject

Another strange thing is that all of these messages, even those with 
env_From values < 10, were rejected:

# for i in $(grep -l kailacat msg.*) ; do grep "^result:" $i ; done
result: reject
result: reject
result: reject
result: reject
result: reject
result: reject
result: reject
result: reject

> I just did some tests with `dccd -Kall` and large env_From checksum
> totals.  They were ignored.

I can't reproduce the problem. I tried sending a couple of dozen
messages from my home to the shop, and all were accepted just fine,
though they were checked against a different DCC server
(X-DCC-Misty-Metrics).

I think I'm one update behind. I'll be happy to get it current, or I
can leaves things as they are if you think there's anything worth
looking into further.

Thanks a lot.

-- John