Boxtrapper to Boxtrapper email

[ccccanada]

Hello!

I have noticed a new bug today when using Boxtrapper.

If you send an email from an address that is protected by boxtrapper to another address also protected by boxtrapper they keep bouncing messages between each other in a continuous loop.

The log file for the accounts in question grow incredibly big until you run out of diskspace on the accounts.

If anyone has a fix for this please provide it.

Thank you!
Harold

[chirpy]

Hate to say it, but this is an excellent example of why challenge response systems are hated by anti-spam proponents and usually cause more load on a server than other anti-spam solutions and indeed spam itself.

Short answer, don't use it

Longer answer (by a few characters) log it in bugzilla to see if there's anything cPanel can do to help.

[gmarton]

Hi,
I had the same problem.
Disabled boxtrapper on one of the accounts, that broke the loop.
Looked at both accounts cpanel/disk usage and manually deleted the fat log files.
Then turned boxtrapper back on.
Hope this helps...
GM

[ccccanada]

Deleted message because I checked the wrong thing.

[postie]

If you send an email from an address that is protected by boxtrapper to another address also protected by boxtrapper they keep bouncing messages between each other in a continuous loop.

TMDA seems to have solved that problem (tagged message delivery agent)... here's the info from their FAQ:
http://tmda.net/faq.cgi?req=show&file=faq04.012.htp

So if TMDA can do it, surely Boxtrapper can... Does anyone know if this looping problem been fixed in Boxtrapper lately?
Thanks!
p.

[eos1]

yeah, this needs to be fixed asap since boxtrapper is already out there...current and edge.

sooner(the time a lot of cPanel machine use boxtrapper), this will be big mess...

[vincentg]

Ran into this also

But it seems the spammer used a auto responder return email address.

Not good - not good at all!

Boxtrapper needs to check for this to avoid such loop problems.

Vin

[jeroman8]

Ran into this also

But it seems the spammer used a auto responder return email address.

Not good - not good at all!

Boxtrapper needs to check for this to avoid such loop problems.

Vin

Same here today !!
Server was going on it's knees causing mysql to go down because of the load.
I disabled boxtrapper on the account causing this and now it's fine.
He had 2 addresses with boxtrapper and with autoresponders - it was
going to eachother like ping pong but the ball was flying really really fast.
I though a loop technology regarding this already was invented.

[vincentg]

I suggest to not use boxtrapper until this bug is fixed.

Once in a loop it can cause loads over 200 which will in many cases crash a server.

Sent an email to all my clients to avoid it until we know this problem is solved.

Vincent G.

[naveen3]

Yes i am facing same problem.
both domains are on same server, so log files for same mail ids are going to grow 4-5 gbs per day.
logs shows like -

Internal verification user@domain.com/Re: Re: Re: Re: ..........
and all 4 gb file with Re: Re: Re: Re:

i put those ids in white list but no luck.

any updates from - cpanel / boxtrapper.
-Naveen

[Nick]

I have same problem
Does anyone know a fix ?

[hostcp3]

If you want to use boxtrapper ( we are testing this )

whitelist your senders

remove all content from the verify email ( appears to stop it being sent ), that stops you getting listed on spam lists and stops spammers using a responder to whitelist themselves, ( and appears to stop looping with other boxtrapper accounts as well. )

use box trapper to trap the spam, daily or more often check the queue for legitimate senders

if queue is massive just ( after browsing it )

rm -rf /home/user/etc/boxtrapper/queue ( if you have access to your server )

( maybe from file manager you could delete the folder 'queue' I am not sure didn't look )

or just put the auto delete queue down to 1 or 2 days.

for me this appears to be a solution to getting all legitimate email as I don't need to run any filters or spam assassin type programs which have been known to lose legitimate emails.

I realize its extra work we are open to suggestions to improve the above system.

[Spiral]

Just a side tip for everyone ....

If you put a single period "." in the search field for the boxtrapper queue display
then it will show all queued messages all at once and you don't have to scroll
through all the previous day's messages

[hostcp3]

spiral

cool thanks for that, whoo hoo, wake up today without any spam in my outlook express for the first time in years.

whitelisted 2 senders and all is good, no bounces, no responders to worry about blacklisting server.

looked at the queue and saw a couple of subject lines repeated a hundred times, put a cpanel filter in place for those.

don't have to worry about spam assassin or other program causing false positives.

have removed RBL checking off this server which means I won't be blocked from sending when my ISP gets listed as many do even when they are working hard to fight spam.

To give you an idea i was getting about 1,000 spam a day because I have catch all setup and need to have that in place to catch any legit email.

Now just waiting for the next trick spammers will use to send me spam, goodness they were addressing to me personally and putting subject lines in to our clients, any tips appreciated.

[jsnape]

When is cpanel going to make it so that disabling boxtrapper actaully disables it? Or better yet, completely remove it. This is destroying servers.

[] BoxTrapper Spam Trap (disabled by the "disabled" feature list)
Not checked!


root@serve [/home/username/etc/2username.net/bob/boxtrapper/log]# ls -l
total 83497200
drwx------ 2 username username 4096 Nov 13 13:39 ./
drwx------ 5 username username 4096 Oct 1 14:59 ../
-rw-r--r-- 1 username mail 4113 Nov 1 17:51 11-01-2006.log
-rw-r--r-- 1 username mail 2206 Nov 2 19:44 11-02-2006.log
-rw-r--r-- 1 username mail 454 Nov 3 05:09 11-03-2006.log
-rw-r--r-- 1 username mail 4361 Nov 5 09:47 11-05-2006.log
-rw-r--r-- 1 username mail 180282675 Nov 9 23:59 11-09-2006.log
-rw-r--r-- 1 username mail 1346260608 Nov 10 23:59 11-10-2006.log
-rw-r--r-- 1 username mail 27797138479 Nov 11 23:59 11-11-2006.log
-rw-r--r-- 1 username mail 52094564478 Nov 12 23:59 11-12-2006.log
-rw-r--r-- 1 username mail 3999322112 Nov 13 13:39 11-13-2006.log

Boxtrapper disabled on the server for months. Boxtrapper manually deleted, it recreates itself overnight and starts killing the server.

Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda7 1004024 744020 209000 79% /
/dev/sda1 101086 22083 73784 24% /boot
none 1035912 0 1035912 0% /dev/shm
/dev/sda8 268249068 254622676 64 100% /home <--BOXTRAPPER!!!!
/dev/sda6 4032092 180392 3646876 5% /tmp
/dev/sda3 10080520 5475484 4092968 58% /usr
/dev/sda2 20161204 8640872 10496192 46% /var
/tmp 4032092 180392 3646876 5% /var/tmp

AFTER DELETING ONE BOXTRAPPER LOG:

Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda7 1004024 744012 209008 79% /
/dev/sda1 101086 22083 73784 24% /boot
none 1035912 0 1035912 0% /dev/shm
/dev/sda8 268249068 87792732 166830008 35% /home
/dev/sda6 4032092 184372 3642896 5% /tmp
/dev/sda3 10080520 5469272 4099180 58% /usr
/dev/sda2 20161204 8651424 10485640 46% /var
/tmp 4032092 184372 3642896 5% /var/tmp

I'd put in a bug report but come on! Boxtrapper IS A BUG. There is no fix besides removing it completely. Plus adding 1 the 1300+ open bug reports is probably a waste of time.