> On 8 Oct. 2016, at 1:55 am, Colin Waring <co...@dolphinict.co.uk> wrote:
>
> Hi James,
>
> ASSP needs lots of modules installing to run, so if you've never run
> mod_inst.pl or been through the list of modules and installed them manually
> it is worth doing it. I don't know enough about MacOS X to say if mod_inst.pl
> is the best way of managing the modules but if it is run with the same
> version of perl that ASSP is using I would have thought it would work.
>
> If you're able to access the GUI then that means that it is not losing
> connection completely. It looks to me like you're accessing the GUI via an
> IPV6 loopback address so it may be IPV4 that is dying. Alternatively it might
> just be outbound connections from the process. Does ASSP still log inbound
> connections to port 25 when it is faulted? They will presumably fail as it
> can't contact the MTA but if it is seeing them coming in then it might help
> track down the issue.
>
> Other than that, standard testing applies. Monitor performance, check through
> all your settings and turn up any necessary logging. Make sure nothing like a
> firewall, denyhosts or other antivirus is getting in the way.
>
> The high CPU average is definitely a concern, especially over that time
> period so I'm surprised you've not spotted it before. My normal average is
> <1% except for the past week where I've had no end of issues - some largely
> caused by my settings whilst trying to figure out other problems. Thomas
> pointed out to me that there's no need to set EnableHighPerformance to
> anything other than off if things are running fine.
>
> If you've been running for a while, make sure all ASSP files are up to date
> not just the main assp.pl and go through every single one of your settings.
> Make sure you've a good reason for anything that isn't set to default
> otherwise change it back. Be aware that the default recommendations may
> change as new versions come out.
>
> All the best,
> Colin Waring.
>
>
> Colin Waring
Thanks Colin.
I’ve had it running since Friday evening with no problems.
This morning I notice that it is having problems connecting to ClamAV.
Eg, ASSP log says:
Oct-10-16 10:16:04 id-54963-13162 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
12.130.153.25] <em...@qr.qatarairways.com> to: m...@bordo.com.au [Plugin]
calling plugin ASSP_AFC
Oct-10-16 10:16:04 id-54963-13162 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
12.130.153.25] <em...@qr.qatarairways.com> to: m...@bordo.com.au
<mailto:m...@bordo.com.au> ClamAV: scanned 137424 bytes in message -
Oct-10-16 10:16:04 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect to
'localhost:1864': IO::Socket::INET: connect: timeout
And 5 seconds later I see this in clamd.log:
Mon Oct 10 10:16:09 2016 -> ERROR: ScanStream 1864: accept timeout.
Actually, now it’s started again:
Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
121.200.228.218] <ad...@mmem.com.au> to: sales.em...@bordo.com.au ClamAV:
scanned 2 bytes in whitelisted message -
Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect to
'localhost:1815': IO::Socket::INET: connect: timeout
Oct-10-16 10:22:21 [Worker_1] ClamAV Up
Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
121.200.228.218] <ad...@mmem.com.au> to: sales.em...@bordo.com.au ClamAV:
scanned 719 bytes in whitelisted message -
Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect to
'localhost:1220': IO::Socket::INET: connect: timeout
Oct-10-16 10:22:21 [Worker_1] ClamAV Up
Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
121.200.228.218] <ad...@mmem.com.au> to: sales.em...@bordo.com.au ClamAV:
scanned 1029 bytes in whitelisted message -
Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect to
'localhost:1337': IO::Socket::INET: connect: timeout
Oct-10-16 10:22:21 [Worker_1] ClamAV Up
Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
121.200.228.218] <ad...@mmem.com.au> to: sales.em...@bordo.com.au ClamAV:
scanned 18149 bytes in whitelisted message -
Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect to
'localhost:1107': IO::Socket::INET: connect: timeout
Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
121.200.228.218] <ad...@mmem.com.au> to: sales.em...@bordo.com.au whitelisted
(no bad attachments)
Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] [MessageOK] 192.168.1.2
[OIP: 121.200.228.218] <ad...@mmem.com.au> to: sales.em...@bordo.com.au message
ok - (whitelistdb) - [INV REQUEST]
Oct-10-16 10:22:47 [Worker_1] [TLS-out] 127.0.0.1 info: authentication - plain
is used
Oct-10-16 10:22:47 [Worker_1] [TLS-out] 127.0.0.1 info: authentication (PLAIN)
realms - foruser:, user:stev...@bordo.com.au
Oct-10-16 10:22:56 [Worker_2] *** 127.0.0.1:10026 didn't work, trying others...
Oct-10-16 10:22:56 [Worker_2] Error: couldn't create server socket to
127.0.0.1:10026 -- aborting connection
Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] 127.0.0.1
<stev...@bordo.com.au> to: sales.em...@bordo.com.au [Plugin] calling plugin
ASSP_AFC
Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] 127.0.0.1
<stev...@bordo.com.au> to: sales.em...@bordo.com.au info: 1 attachment found
for Level-0
Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] 127.0.0.1
<stev...@bordo.com.au> to: sales.em...@bordo.com.au message proxied without
processing (no bad attachments)
Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] [MessageOK] 127.0.0.1
<stev...@bordo.com.au> to: sales.em...@bordo.com.au message ok [Grays tractor
services] -> /Applications/assp/notspam/Grays_tractor_services--91742.eml
Oct-10-16 10:23:00 [Worker_3] *** 127.0.0.1:10026 didn't work, trying others...
Oct-10-16 10:23:23 [Worker_10000] Cleaning penalty records...
Oct-10-16 10:23:23 [Worker_10000] PenaltyBox: cleaning BlackBox (PBBlack)
finished: IP's before=7, deleted=2
Oct-10-16 10:23:24 [Worker_10000] PenaltyBox: cleaning WhiteBox (PBWhite)
finished: IP's before=3691, deleted=19
Oct-10-16 10:23:24 [Worker_10000] PBTrap: cleaning finished: before=17,
deleted=4
Oct-10-16 10:23:26 [Worker_2] [TLS-out] 127.0.0.1 info: authentication - plain
is used
Oct-10-16 10:23:26 [Worker_2] [TLS-out] 127.0.0.1 info: authentication (PLAIN)
realms - foruser:us...@bordo.com.au, user:us...@bordo.com.au
Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] 127.0.0.1
<us...@bordo.com.au> to: r...@au.xchanging.com [Plugin] calling plugin ASSP_AFC
Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] 127.0.0.1
<us...@bordo.com.au> to: r...@au.xchanging.com local (no bad attachments)
Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] [Plugin] 127.0.0.1
<us...@bordo.com.au> to: r...@au.xchanging.com ASSP_OCR: OCR(2.21)
(TextFile(text2.cat)) data extracted
Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] [MessageOK] 127.0.0.1
<us...@bordo.com.au> to: r...@au.xchanging.com message ok [Re WorkCover Monthly
Reports Bordo International September 2016]
Error: couldn't create server socket to 127.0.0.1:10026 -- aborting connection
(suppressed 2 concurrent equal 'Error' loglines from all Workers)
Oct-10-16 10:23:38 [Worker_10000] Warning: Name Server 192.168.1.29: does not
respond or timed out
Oct-10-16 10:23:38 [Worker_10000] Warning: Name Server 208.67.222.222: does not
respond or timed out
Oct-10-16 10:23:38 [Worker_10000] ERROR: !!!! no answering DNS-SERVER found !!!!
Oct-10-16 10:23:59 [Worker_1] ClamAV Up
Oct-10-16 10:23:59 id-55367-14617 [Worker_1] 127.0.0.1 <stev...@bordo.com.au>
to: sales.em...@bordo.com.au ClamAV: scanned 100485 bytes in file
/Applications/assp/notspam/Grays_tractor_services--91742.eml -
Oct-10-16 10:23:59 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect to
'localhost:1155': IO::Socket::INET: connect: timeout
Oct-10-16 10:24:12 [Worker_1] [TLS-out] 127.0.0.1 info: authentication - plain
is used
Oct-10-16 10:24:12 [Worker_1] [TLS-out] 127.0.0.1 info: authentication (PLAIN)
realms - foruser:jul...@bordo.com.au, user:jul...@bordo.com.au
Oct-10-16 10:24:15 [Worker_10000] DMARCpol: searching for
DMARC-agregate-reports to generate in 16 stored DMARC policy records
Oct-10-16 10:24:16 [Worker_10000] Info: looking for files to (re)send
Oct-10-16 10:24:20 [Worker_1] *** 127.0.0.1:10026 didn't work, trying others...
Oct-10-16 10:24:20 [Worker_1] Error: couldn't create server socket to
127.0.0.1:10026 -- aborting connection
Oct-10-16 10:24:20 [Worker_1] *** 127.0.0.1:10026 didn't work, trying others...
Oct-10-16 10:24:28 [Worker_1] [TLS-out] 192.168.1.51 info: authentication -
plain is used
Oct-10-16 10:24:28 [Worker_1] [TLS-out] 192.168.1.51 info: authentication
(PLAIN) realms - foruser:al...@bordo.com.au, user:al...@bordo.com.au
Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] 192.168.1.51
<al...@bordo.com.au> to: ch...@crossroad.bz [Plugin] calling plugin ASSP_AFC
Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] 192.168.1.51
<al...@bordo.com.au> to: ch...@crossroad.bz info: 1 attachment found for Level-0
Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] 192.168.1.51
<al...@bordo.com.au> to: ch...@crossroad.bz local (no bad attachments)
Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] [Plugin] 192.168.1.51
<al...@bordo.com.au> to: ch...@crossroad.bz ASSP_OCR: OCR(2.21)
(TextFile(text5.cat)) data extracted
Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] [MessageOK] 192.168.1.51
<al...@bordo.com.au> to: ch...@crossroad.bz message ok [Re RFQ]
Error: couldn't create server socket to 127.0.0.1:10026 -- aborting connection
(suppressed 2 concurrent equal 'Error' loglines from all Workers)
Oct-10-16 10:24:31 [Worker_10000] Info: saving Stats in file asspstats.sav
Oct-10-16 10:24:31 [Worker_10000] Info: saving ScoreStats in file
asspscorestats.sav
I’ll restart ASSP.
James.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
