--- Sandeep Agarwal <[EMAIL PROTECTED]> wrote:
>
> --- Jason Haar <[EMAIL PROTECTED]> wrote:
>
> > Sandeep Agarwal wrote:
> > > hello all,
> > >
> > > i am running qmail+clamav. This is my clamd.conf
> > and
> > > freshclam.conf files
> > >
> > >
> >
> > First thing - wrong list - you are really asking a
> > Qmail-Scanner question.
> >
> > Secondly, you don't mention you are also using
> > SpamAssassin (I can see
> > that from the message you included). Check the
> > qmail-queue.log debug
> > file - see where Qmail-Scanner is actually hanging
> > (it keeps track of
> > where all the time goes).
> >
> > I think you'll find it's hanging in SpamAssassin.
> If
> > I'm wrong and it is
> > clamd - then at least you'll know that much for
> > sure. If it is clamd -
> > then indeed this is the correct list to post this
> > question to. In that
> > case, ensure clamd is logging somewhere - either
> to
> > a file or to syslog.
> > Then see what clamd reports about these sorts of
> > messages
> >
> > (and if it's SpamAssassin - then I really haven't
> > solved anything. DNS
> > timeouts come to mind - but I don't know how that
> > could ever add up to
> > the 1330 seconds you are seeing)
> >
>
> when i re-check the header, as you suggested, i
> found
> that spamassassin is not even scanning the mail
> X-Antivirus-MYDOMAIN: 1.24-st-qms
> (Clear:RC:0(61.16.161.3):SA:0(?/?):.
> Processed in 1330.693658 secs Process 10258)
>
> this is what qmail-scanner has to say about it as on
> http://qmail-scanner.sourceforge.net/FAQ.php
>
> # Why do some messages get tagged with "SA:0(?/?)"
> instead of numbers?. SpamAssassins "spamd" daemon
> has
> a max e-mail size limit. If a message is larger than
> that size, it just returns with no score (as it
> skipped it). As such Qmail-Scanner has no numbers to
> report, so it uses "?" to show that happened. Also,
> if
> some error occurs within SpamAssassin, Qmail-Scanner
> returns "?" again - showing that SA couldn't do the
> job on that particular mail message. If you use
> softlimit to limit the max amount of RAM SA can use
> -
> that can impact this too.
>
> thanks
>
> Sandeep
checked the logs after sending a mail size 6MB.
reading the logs its clear that this is not clamd
problem. its something else, whats the "w_c:elapsed
time" in the log below ? i guess its the time waiting
in the queue. if yes how can this be fixed ?
Tue, 04 Apr 2006 17:02:25 IST:31100: w_c: elapsed time
from start 1604.306495 secs
Tue, 04 Apr 2006 17:02:26 IST:31100:
return-path='*******************',
recips='***************'
Tue, 04 Apr 2006 17:02:26 IST:31100: from='Sandeep
Agarwal <********************>', subj='Fwd: axe
effect!!', via SMTP from 206.190.48.98
Tue, 04 Apr 2006 17:03:11 IST:31100: clamdscan:
finished scan in 44.9711 secs
Tue, 04 Apr 2006 17:03:11 IST:31100: SA: message too
big - skip it
Tue, 04 Apr 2006 17:03:11 IST:31100: p_s: finished
scan in 0.011766 secs
Tue, 04 Apr 2006 17:03:11 IST:31100: ini_sc: finished
scan of
"/var/spool/qmailscan/tmp/ngblhost1114414874176031100"...
Tue, 04 Apr 2006 17:03:11 IST:31100: ------ Process
31100 finished. Total of 1650.008028 secs
Sandeep
__________________________________________________________
Yahoo! India Matrimony: Find your partner now. Go to http://yahoo.shaadi.com
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
