Date: Fri, 24 Dec 2010 18:59:09 GMT From: Michael Scheidell <michael.scheidell@secnap.com> To: freebsd-gnats-submit@FreeBSD.org Subject: ports/153431: security/amavisd-new p5-IO-Socket-INET6 causes massive delays on non ipv6 systems Message-ID: <201012241859.oBOIx9ZB041059@red.freebsd.org> Resent-Message-ID: <201012241900.oBOJ0HxB059278@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 153431 >Category: ports >Synopsis: security/amavisd-new p5-IO-Socket-INET6 causes massive delays on non ipv6 systems >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Fri Dec 24 19:00:17 UTC 2010 >Closed-Date: >Last-Modified: >Originator: Michael Scheidell >Release: i386 7.3 >Organization: SECNAP Network Security >Environment: >Description: see: <http://www.gossamer-threads.com/lists/spamassassin/users/157611>; if you include p5-IO-Socket-INET6 with a system that doesn't have ipv6 compiled in the kernel, you can cause 28 second delays PER DNS LOOKUP IN amavisd-new. with mx, a, ptr, dkim, rbl and spf lookups, you can cause 3 mins delays per email. (spamassassin -D < ../test-messages/sample-spam.txt took 6 second without INET6, 2mins 46 seconds with) >How-To-Repeat: portinstall p5-IO-Socket-INET6 on a non ipv6 system: (comes installed as a requirement for amavisd-new) >Fix: Q to maintainer: I can't see why p5-IO-Socket-INET6 is required on non ipv6 systems. without it, everything seems fine. this patch will fix it: diff -bBru /tmp/ Makefile --- /tmp/Makefile 2010-09-21 03:56:39.000000000 -0400 +++ Makefile 2010-12-24 13:51:32.000000000 -0500 @@ -8,7 +8,7 @@ PORTNAME= amavisd-new PORTVERSION= 2.6.4 -PORTREVISION= 8 +PORTREVISION= 9 PORTEPOCH= 1 CATEGORIES= security MASTER_SITES= http://www.ijs.si/software/amavisd/ \ @@ -23,7 +23,6 @@ ${SITE_PERL}/Convert/TNEF.pm:${PORTSDIR}/converters/p5-Convert-TNEF \ p5-Convert-UUlib>=1.08,1:${PORTSDIR}/converters/p5-Convert-UUlib \ ${SITE_PERL}/Archive/Zip.pm:${PORTSDIR}/archivers/p5-Archive-Zip \ - ${SITE_PERL}/IO/Socket/INET6.pm:${PORTSDIR}/net/p5-IO-Socket-INET6 \ p5-Net-Server>=0.93:${PORTSDIR}/net/p5-Net-Server \ p5-Mail-DKIM>=0.33:${PORTSDIR}/mail/p5-Mail-DKIM @@ -224,6 +223,10 @@ .include <bsd.port.pre.mk> +.if defined(WITH_IPV6) +RUN_DEPENDS+= ${SITE_PERL}/IO/Socket/INET6.pm:${PORTSDIR}/net/p5-IO-Socket-INET6 +.endif + .if ${PERL_LEVEL} < 500903 RUN_DEPENDS+= p5-IO-Compress>=2.017:${PORTSDIR}/archivers/p5-IO-Compress .endif >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201012241859.oBOIx9ZB041059>