In exim_panic log I am seeing this on a regular basis:
spam acl condition: error reading from spamd socket: Connection timed
out
Depending on the time of the day, and phase of the moon, it is happening
every between 8 mins and 15 mins.
In the data section of ACL (the last item is):
warn condition = ${if or{\
{eq
{${substr_0_6:$sender_host_address}}{161.74}}\
{>{$message_size}{30K}}\
}\
{0}{1}}
spam = exim
message = X-New-Subject: **SPAM** $h_Subject:
log_message = found spam score over treshold ($spam_score
($spam_bar
)) Sender=\'$sender_address\' Subject=$h_Subject
We are also using clamd to check for virus just before spamd
The Exim version is:
Exim version 4.60
SpamAssassin version is:
SpamAssassin Server version 3.2.5
running on Perl 5.8.3
with SSL support (IO::Socket::SSL 1.13)
with zlib support (Compress::Zlib 1.41)
spamd is run as follows:
/usr/bin/spamd -d -x -m 5 --max-conn-per-child=200 --timeout-tcp=30
--timeout-child=270 --socketpath=/var/run/spamd_socket -u exim -r
/var/run/spamd.pid
In the Exim config file, I have the following:
local_scan_timeout = 10m
receive_timeout = 0s
rfc1413_query_timeout = 1s
smtp_receive_timeout = 12m
Just to give you an example, this is what we are seeing on the exim
logs:
2009-02-19 13:22:46 1La8pa-0001yS-HX spam acl condition: error reading
from spamd socket: Connection timed out
exigrep 1La8pa-0001yS-HX exim_mainlog
2009-02-19 13:22:46 1La8pa-0001yS-HX spam acl condition: error reading
from spamd socket: Connection timed out
2009-02-19 13:22:46 1La8pa-0001yS-HX H=outmail002.ash1.tfbnw.net
(mx-out.facebook.com) [69.63.184.102] Warning: ACL "warn" statement
skipped: condition test deferred
2009-02-19 13:22:46 1La8pa-0001yS-HX <=
[email protected] H=outmail002.ash1.tfbnw.net
(mx-out.facebook.com) [69.63.184.102] P=esmtp S=2295
[email protected] T="Abdullah Al
Andalusi invited you to join the group \"The Fivefold Extremist\"..."
from <[email protected]> for
[email protected]
2009-02-19 13:22:48 1La8pa-0001yS-HX => [email protected]
<[email protected]> R=route_internal_bydns
T=internal_smtp H=aspmx.l.google.com [74.125.79.27] C="250 2.0.0 OK
1235049768 10si3007491eyz.40"
2009-02-19 13:22:48 1La8pa-0001yS-HX Completed
I have seen this kind of message from other exim users, and I shall be
grateful if somebody can give me some idea of how to fix the problem.
I think we are allowing lot of spam messages through due to the fact
that it is not being checked.
Regards
Sujit Choudhury
University of Westminster
--
The University of Westminster is a charity and a company limited by
guarantee. Registration number: 977818 England. Registered Office:
309 Regent Street, London W1B 2UW, UK.
--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
