search

Blue-Labs / Blam

Blue Labs anti-muggle milter (mail filter)
0 stars 0 forks source link

KeyError: 'entities' #15

Closed FirefighterBlu3 closed 8 years ago

FirefighterBlu3 commented 8 years ago 
"01:55:12 I 0.0  10.255.0.4:39223 reporting_domain is blue-labs.org"
marf parms: {'Original-Mail-From': 'bernadette.sprenkle@host-185-55-191-161.pyripe.com', 'Source-Port': '53650', 'Reporting-MTA': 'sea-dragon.blue-labs.org', 'Arrival-Date': 'Fri, 29 Jan 2016 01:55:12 +0000', 'Source-IP': '185.55.191.161', 'Feedback-Type': 'abuse', 'Reported-Domain': ['host-185-55-191-161.pyripe.com'], 'Original-Rcpt-To': ['david@kalifornia.com', 'afggcmmryto@kalifornia.com'], 'Version': '1', 'User-Agent': 'BlueLabs ARF v1.5'}
collected from abuse.net: ['abuse@host-185-55-191-161.pyripe.com', 'abuse@pyripe.com']
Traceback (most recent call last):
  File "/var/bluelabs/python/arf.py", line 382, in find_abuse_contacts
    r = o.lookup_rdap()
  File "/usr/lib/python3.5/site-packages/ipwhois/ipwhois.py", line 189, in lookup_rdap
    excluded_entities, response, bootstrap)
  File "/usr/lib/python3.5/site-packages/ipwhois/rdap.py", line 720, in lookup
    for ent in response['entities']:
KeyError: 'entities'
FirefighterBlu3 commented 8 years ago

this is an ARF project issue (i haven't put ARF on GH yet) but the actual problem exists in the ipwhois module. debug print statement added to see why this value is missing. i suspect a rate limit message

FirefighterBlu3 commented 8 years ago

press(ctrl, "/")

[--- Commented from Asana.com

commenter Nichalous Gibbons

---[aa]

FirefighterBlu3 commented 8 years ago

trying to archive abuse, CDI, AS/ANA///, blue__LaBS, JMOs can the requests be sorted so responses are more prompt

on thunderbird, automated incoming message sorting, so many requests

[--- Commented from Asana.com

commenter Nichalous Gibbons

---[aa]

FirefighterBlu3 commented 8 years ago

i've changed the reporting addresses so it'll go to "nick+arf@blue-labs.org" which you can set up a rule to put that into an ARF subfolder with procmail. remind me and i'll show you how to do that tomorrow

[--- Commented from Asana.com

commenter David

---[aa]

FirefighterBlu3 commented 8 years ago

and remember, for right now, these ARF reports are purely for your curiosity and learning how the ARF report is generated. they're low priority

[--- Commented from Asana.com

commenter David

---[aa]

FirefighterBlu3 commented 8 years ago

ipwhois (upstream) fixed, the cause of this was a failure to resolve the object and then continued processing as if the object had been resolved.