ports/153431: security/amavisd-new p5-IO-Socket-INET6 causes massive delays on non ipv6 systems
Michael Scheidell
michael.scheidell at secnap.com
Fri Dec 24 19:00:18 UTC 2010
>Number: 153431
>Category: ports
>Synopsis: security/amavisd-new p5-IO-Socket-INET6 causes massive delays on non ipv6 systems
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Fri Dec 24 19:00:17 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator: Michael Scheidell
>Release: i386 7.3
>Organization:
SECNAP Network Security
>Environment:
>Description:
see:
<http://www.gossamer-threads.com/lists/spamassassin/users/157611>
if you include p5-IO-Socket-INET6 with a system that doesn't have ipv6 compiled in the kernel, you can cause 28 second delays PER DNS LOOKUP IN amavisd-new.
with mx, a, ptr, dkim, rbl and spf lookups, you can cause 3 mins delays per email.
(spamassassin -D < ../test-messages/sample-spam.txt took 6 second without INET6, 2mins 46 seconds with)
>How-To-Repeat:
portinstall p5-IO-Socket-INET6 on a non ipv6 system:
(comes installed as a requirement for amavisd-new)
>Fix:
Q to maintainer: I can't see why p5-IO-Socket-INET6 is required on non ipv6 systems. without it, everything seems fine.
this patch will fix it:
diff -bBru /tmp/ Makefile
--- /tmp/Makefile 2010-09-21 03:56:39.000000000 -0400
+++ Makefile 2010-12-24 13:51:32.000000000 -0500
@@ -8,7 +8,7 @@
PORTNAME= amavisd-new
PORTVERSION= 2.6.4
-PORTREVISION= 8
+PORTREVISION= 9
PORTEPOCH= 1
CATEGORIES= security
MASTER_SITES= http://www.ijs.si/software/amavisd/ \
@@ -23,7 +23,6 @@
${SITE_PERL}/Convert/TNEF.pm:${PORTSDIR}/converters/p5-Convert-TNEF \
p5-Convert-UUlib>=1.08,1:${PORTSDIR}/converters/p5-Convert-UUlib \
${SITE_PERL}/Archive/Zip.pm:${PORTSDIR}/archivers/p5-Archive-Zip \
- ${SITE_PERL}/IO/Socket/INET6.pm:${PORTSDIR}/net/p5-IO-Socket-INET6 \
p5-Net-Server>=0.93:${PORTSDIR}/net/p5-Net-Server \
p5-Mail-DKIM>=0.33:${PORTSDIR}/mail/p5-Mail-DKIM
@@ -224,6 +223,10 @@
.include <bsd.port.pre.mk>
+.if defined(WITH_IPV6)
+RUN_DEPENDS+= ${SITE_PERL}/IO/Socket/INET6.pm:${PORTSDIR}/net/p5-IO-Socket-INET6
+.endif
+
.if ${PERL_LEVEL} < 500903
RUN_DEPENDS+= p5-IO-Compress>=2.017:${PORTSDIR}/archivers/p5-IO-Compress
.endif
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list