Hopefully this fixes my problem:
> fixed in assp 2.5.4 build 16290:
>
> - uncleaned DNS UDP sockets may caused a file descriptor overload in perl.
> This caused assp to become
> unresponsive for IPv4 on some linux/mac systems. This applies to
> Net::DNS 1.03 and higher.
James.
> On 10 Oct. 2016, at 10:36 am, James Brown <jlbr...@bordo.com.au> wrote:
>
>>
>> On 8 Oct. 2016, at 1:55 am, Colin Waring <co...@dolphinict.co.uk> wrote:
>>
>> Hi James,
>>
>> ASSP needs lots of modules installing to run, so if you've never run
>> mod_inst.pl or been through the list of modules and installed them manually
>> it is worth doing it. I don't know enough about MacOS X to say if
>> mod_inst.pl is the best way of managing the modules but if it is run with
>> the same version of perl that ASSP is using I would have thought it would
>> work.
>>
>> If you're able to access the GUI then that means that it is not losing
>> connection completely. It looks to me like you're accessing the GUI via an
>> IPV6 loopback address so it may be IPV4 that is dying. Alternatively it
>> might just be outbound connections from the process. Does ASSP still log
>> inbound connections to port 25 when it is faulted? They will presumably fail
>> as it can't contact the MTA but if it is seeing them coming in then it might
>> help track down the issue.
>>
>> Other than that, standard testing applies. Monitor performance, check
>> through all your settings and turn up any necessary logging. Make sure
>> nothing like a firewall, denyhosts or other antivirus is getting in the way.
>>
>> The high CPU average is definitely a concern, especially over that time
>> period so I'm surprised you've not spotted it before. My normal average is
>> <1% except for the past week where I've had no end of issues - some largely
>> caused by my settings whilst trying to figure out other problems. Thomas
>> pointed out to me that there's no need to set EnableHighPerformance to
>> anything other than off if things are running fine.
>>
>> If you've been running for a while, make sure all ASSP files are up to date
>> not just the main assp.pl and go through every single one of your settings.
>> Make sure you've a good reason for anything that isn't set to default
>> otherwise change it back. Be aware that the default recommendations may
>> change as new versions come out.
>>
>> All the best,
>> Colin Waring.
>>
>>
>> Colin Waring
>
> Thanks Colin.
>
> I’ve had it running since Friday evening with no problems.
>
> This morning I notice that it is having problems connecting to ClamAV.
>
> Eg, ASSP log says:
>
> Oct-10-16 10:16:04 id-54963-13162 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 12.130.153.25] <em...@qr.qatarairways.com <mailto:em...@qr.qatarairways.com>>
> to: m...@bordo.com.au <mailto:m...@bordo.com.au> [Plugin] calling plugin
> ASSP_AFC
> Oct-10-16 10:16:04 id-54963-13162 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 12.130.153.25] <em...@qr.qatarairways.com <mailto:em...@qr.qatarairways.com>>
> to: m...@bordo.com.au <mailto:m...@bordo.com.au> <mailto:m...@bordo.com.au
> <mailto:m...@bordo.com.au>> ClamAV: scanned 137424 bytes in message -
> Oct-10-16 10:16:04 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect
> to 'localhost:1864': IO::Socket::INET: connect: timeout
>
> And 5 seconds later I see this in clamd.log:
>
> Mon Oct 10 10:16:09 2016 -> ERROR: ScanStream 1864: accept timeout.
>
> Actually, now it’s started again:
>
> Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 121.200.228.218] <ad...@mmem.com.au <mailto:ad...@mmem.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> ClamAV: scanned 2
> bytes in whitelisted message -
> Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect
> to 'localhost:1815': IO::Socket::INET: connect: timeout
> Oct-10-16 10:22:21 [Worker_1] ClamAV Up
> Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 121.200.228.218] <ad...@mmem.com.au <mailto:ad...@mmem.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> ClamAV: scanned
> 719 bytes in whitelisted message -
> Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect
> to 'localhost:1220': IO::Socket::INET: connect: timeout
> Oct-10-16 10:22:21 [Worker_1] ClamAV Up
> Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 121.200.228.218] <ad...@mmem.com.au <mailto:ad...@mmem.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> ClamAV: scanned
> 1029 bytes in whitelisted message -
> Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect
> to 'localhost:1337': IO::Socket::INET: connect: timeout
> Oct-10-16 10:22:21 [Worker_1] ClamAV Up
> Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 121.200.228.218] <ad...@mmem.com.au <mailto:ad...@mmem.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> ClamAV: scanned
> 18149 bytes in whitelisted message -
> Oct-10-16 10:22:21 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect
> to 'localhost:1107': IO::Socket::INET: connect: timeout
> Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] 192.168.1.2 [OIP:
> 121.200.228.218] <ad...@mmem.com.au <mailto:ad...@mmem.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> whitelisted (no
> bad attachments)
> Oct-10-16 10:22:21 id-55340-18830 [Worker_1] [TLS-out] [MessageOK]
> 192.168.1.2 [OIP: 121.200.228.218] <ad...@mmem.com.au
> <mailto:ad...@mmem.com.au>> to: sales.em...@bordo.com.au
> <mailto:sales.em...@bordo.com.au> message ok - (whitelistdb) - [INV REQUEST]
> Oct-10-16 10:22:47 [Worker_1] [TLS-out] 127.0.0.1 info: authentication -
> plain is used
> Oct-10-16 10:22:47 [Worker_1] [TLS-out] 127.0.0.1 info: authentication
> (PLAIN) realms - foruser:, user:stev...@bordo.com.au
> <mailto:stev...@bordo.com.au>
> Oct-10-16 10:22:56 [Worker_2] *** 127.0.0.1:10026 didn't work, trying
> others...
> Oct-10-16 10:22:56 [Worker_2] Error: couldn't create server socket to
> 127.0.0.1:10026 -- aborting connection
> Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] 127.0.0.1
> <stev...@bordo.com.au <mailto:stev...@bordo.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> [Plugin] calling
> plugin ASSP_AFC
> Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] 127.0.0.1
> <stev...@bordo.com.au <mailto:stev...@bordo.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> info: 1 attachment
> found for Level-0
> Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] 127.0.0.1
> <stev...@bordo.com.au <mailto:stev...@bordo.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> message proxied
> without processing (no bad attachments)
> Oct-10-16 10:22:56 id-55367-14617 [Worker_1] [TLS-out] [MessageOK] 127.0.0.1
> <stev...@bordo.com.au <mailto:stev...@bordo.com.au>> to:
> sales.em...@bordo.com.au <mailto:sales.em...@bordo.com.au> message ok [Grays
> tractor services] ->
> /Applications/assp/notspam/Grays_tractor_services--91742.eml
> Oct-10-16 10:23:00 [Worker_3] *** 127.0.0.1:10026 didn't work, trying
> others...
> Oct-10-16 10:23:23 [Worker_10000] Cleaning penalty records...
> Oct-10-16 10:23:23 [Worker_10000] PenaltyBox: cleaning BlackBox (PBBlack)
> finished: IP's before=7, deleted=2
> Oct-10-16 10:23:24 [Worker_10000] PenaltyBox: cleaning WhiteBox (PBWhite)
> finished: IP's before=3691, deleted=19
> Oct-10-16 10:23:24 [Worker_10000] PBTrap: cleaning finished: before=17,
> deleted=4
> Oct-10-16 10:23:26 [Worker_2] [TLS-out] 127.0.0.1 info: authentication -
> plain is used
> Oct-10-16 10:23:26 [Worker_2] [TLS-out] 127.0.0.1 info: authentication
> (PLAIN) realms - foruser:us...@bordo.com.au <mailto:us...@bordo.com.au>,
> user:us...@bordo.com.au <mailto:us...@bordo.com.au>
> Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] 127.0.0.1
> <us...@bordo.com.au <mailto:us...@bordo.com.au>> to: r...@au.xchanging.com
> <mailto:r...@au.xchanging.com> [Plugin] calling plugin ASSP_AFC
> Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] 127.0.0.1
> <us...@bordo.com.au <mailto:us...@bordo.com.au>> to: r...@au.xchanging.com
> <mailto:r...@au.xchanging.com> local (no bad attachments)
> Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] [Plugin] 127.0.0.1
> <us...@bordo.com.au <mailto:us...@bordo.com.au>> to: r...@au.xchanging.com
> <mailto:r...@au.xchanging.com> ASSP_OCR: OCR(2.21) (TextFile(text2.cat)) data
> extracted
> Oct-10-16 10:23:26 id-55406-08594 [Worker_2] [TLS-out] [MessageOK] 127.0.0.1
> <us...@bordo.com.au <mailto:us...@bordo.com.au>> to: r...@au.xchanging.com
> <mailto:r...@au.xchanging.com> message ok [Re WorkCover Monthly Reports Bordo
> International September 2016]
> Error: couldn't create server socket to 127.0.0.1:10026 -- aborting
> connection (suppressed 2 concurrent equal 'Error' loglines from all Workers)
> Oct-10-16 10:23:38 [Worker_10000] Warning: Name Server 192.168.1.29: does not
> respond or timed out
> Oct-10-16 10:23:38 [Worker_10000] Warning: Name Server 208.67.222.222: does
> not respond or timed out
> Oct-10-16 10:23:38 [Worker_10000] ERROR: !!!! no answering DNS-SERVER found
> !!!!
> Oct-10-16 10:23:59 [Worker_1] ClamAV Up
> Oct-10-16 10:23:59 id-55367-14617 [Worker_1] 127.0.0.1 <stev...@bordo.com.au
> <mailto:stev...@bordo.com.au>> to: sales.em...@bordo.com.au
> <mailto:sales.em...@bordo.com.au> ClamAV: scanned 100485 bytes in file
> /Applications/assp/notspam/Grays_tractor_services--91742.eml -
> Oct-10-16 10:23:59 [Worker_1] Warning: ClamAV Temporary Off : Cannot connect
> to 'localhost:1155': IO::Socket::INET: connect: timeout
> Oct-10-16 10:24:12 [Worker_1] [TLS-out] 127.0.0.1 info: authentication -
> plain is used
> Oct-10-16 10:24:12 [Worker_1] [TLS-out] 127.0.0.1 info: authentication
> (PLAIN) realms - foruser:jul...@bordo.com.au <mailto:jul...@bordo.com.au>,
> user:jul...@bordo.com.au <mailto:jul...@bordo.com.au>
> Oct-10-16 10:24:15 [Worker_10000] DMARCpol: searching for
> DMARC-agregate-reports to generate in 16 stored DMARC policy records
> Oct-10-16 10:24:16 [Worker_10000] Info: looking for files to (re)send
> Oct-10-16 10:24:20 [Worker_1] *** 127.0.0.1:10026 didn't work, trying
> others...
> Oct-10-16 10:24:20 [Worker_1] Error: couldn't create server socket to
> 127.0.0.1:10026 -- aborting connection
> Oct-10-16 10:24:20 [Worker_1] *** 127.0.0.1:10026 didn't work, trying
> others...
> Oct-10-16 10:24:28 [Worker_1] [TLS-out] 192.168.1.51 info: authentication -
> plain is used
> Oct-10-16 10:24:28 [Worker_1] [TLS-out] 192.168.1.51 info: authentication
> (PLAIN) realms - foruser:al...@bordo.com.au <mailto:al...@bordo.com.au>,
> user:al...@bordo.com.au <mailto:al...@bordo.com.au>
> Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] 192.168.1.51
> <al...@bordo.com.au <mailto:al...@bordo.com.au>> to: ch...@crossroad.bz
> <mailto:ch...@crossroad.bz> [Plugin] calling plugin ASSP_AFC
> Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] 192.168.1.51
> <al...@bordo.com.au <mailto:al...@bordo.com.au>> to: ch...@crossroad.bz
> <mailto:ch...@crossroad.bz> info: 1 attachment found for Level-0
> Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] 192.168.1.51
> <al...@bordo.com.au <mailto:al...@bordo.com.au>> to: ch...@crossroad.bz
> <mailto:ch...@crossroad.bz> local (no bad attachments)
> Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] [Plugin] 192.168.1.51
> <al...@bordo.com.au <mailto:al...@bordo.com.au>> to: ch...@crossroad.bz
> <mailto:ch...@crossroad.bz> ASSP_OCR: OCR(2.21) (TextFile(text5.cat)) data
> extracted
> Oct-10-16 10:24:28 id-55468-19176 [Worker_1] [TLS-out] [MessageOK]
> 192.168.1.51 <al...@bordo.com.au <mailto:al...@bordo.com.au>> to:
> ch...@crossroad.bz <mailto:ch...@crossroad.bz> message ok [Re RFQ]
> Error: couldn't create server socket to 127.0.0.1:10026 -- aborting
> connection (suppressed 2 concurrent equal 'Error' loglines from all Workers)
> Oct-10-16 10:24:31 [Worker_10000] Info: saving Stats in file asspstats.sav
> Oct-10-16 10:24:31 [Worker_10000] Info: saving ScoreStats in file
> asspscorestats.sav
>
> I’ll restart ASSP.
>
> James.------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org <http://slashdot.org/>!
> http://sdm.link/slashdot_______________________________________________
> <http://sdm.link/slashdot_______________________________________________>
> Assp-test mailing list
> Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net>
> https://lists.sourceforge.net/lists/listinfo/assp-test
> <https://lists.sourceforge.net/lists/listinfo/assp-test>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
