On 01/09/2011 06:49 PM, Michael J. Colvin wrote:
Thanks for the replay Eric. Here's the full header:
Received: (qmail 11511 invoked by uid 1010); 9 Jan 2011 16:09:23 -0800
Received: from 192.168.100.122 by mail.norcalisp.com (envelope-from
<michael.col...@gmail.com>, uid 1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.91.2/1082. spamassassin: 3.2.0. perlscan: 1.25-st-qms.
Clear:RC:1(192.168.100.122):.
Processed in 0.094059 secs); 10 Jan 2011 00:09:23 -0000
X-Antivirus-NorCalISP-Mail-From: michael.col...@gmail.com via
mail.norcalisp.com
X-Antivirus-NorCalISP: 1.25-st-qms (Clear:RC:1(192.168.100.122):. Processed
in 0.094059 secs Process 11504)
Received: from unknown (HELO mail.norcalisp.com) (192.168.100.122)
by mail.norcalisp.com with SMTP; 9 Jan 2011 16:09:23 -0800
Received: (qmail 2795 invoked by uid 89); 10 Jan 2011 00:09:21 -0000
Received: by simscan 1.4.0 ppid: 2790, pid: 2791, t: 0.0720s
scanners: attach: 1.4.0 clamav: 0.96.3/m:53/d:12497
Received: from unknown (HELO mail-yi0-f49.google.com) (209.85.218.49)
by mail.norcalisp.com with SMTP; 10 Jan 2011 00:09:21 -0000
Received: by yib2 with SMTP id 2so5429037yib.36
for<mcol...@norcalisp.com>; Sun, 09 Jan 2011 16:08:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:received:date:message-id
:subject:from:to:content-type;
bh=GMPLCtUDsw0tenqLVZLtyBTLSH7m83E9a36NIFIzX9g=;
b=bWDAXb5wt2YuhvYKE7ro9LDiNbkPOGFqmKDyzpOJjorI1+fPSMQeg4O9y8xKt2WXRM
dUeOdL8G59F79xUsHPTDODYlT1pL6/PCDS9dONYO4LRce/OACwGjn+sn+vA1xrOMcasi
45mLzT4w+UxhAjN474zs8TBauKQtTxYJwoXPI=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
b=Tai3/7m8KcMRAUo7vQvthAx35Er2+qbRq+OsI548wcn3rH9m/3wvFrP3MPhkShqa35
Zhv9HOjRaxuw4w+afZhYWdwF53IkzI77UYQ5UZTIgVvpDSAfP61wmAOwSS7PcMdBOT25
NOxzSWtxSdbj9D9wFQ+ULFH5OAUp5P85IBvOQ=
MIME-Version: 1.0
Received: by 10.100.48.4 with SMTP id v4mr488017anv.47.1294618130674; Sun,
09
Jan 2011 16:08:50 -0800 (PST)
Received: by 10.100.120.20 with HTTP; Sun, 9 Jan 2011 16:08:50 -0800 (PST)
Date: Sun, 9 Jan 2011 16:08:50 -0800
Message-ID:<aanlkti=tmjszfszjr7ngoxjhcar4meaorua2jxhz1...@mail.gmail.com>
Subject: Testing
From: Michael Colvin<michael.col...@gmail.com>
To: Michael Colvin<mcol...@norcalisp.com>
Content-Type: multipart/alternative; boundary=0016e642d6a8cc75ba049972c53e
This message is sent, obviously, from Gmail, so it's not an intra-host
e-mail, and no authentication is involved...
Qmlog spamd shows:
01-09 16:01:46 [2113] info: spamd: server started on port 783/tcp (running
version 3.2.5)
01-09 16:01:46 [2113] info: spamd: server pid: 2113
01-09 16:01:46 [2113] info: spamd: server successfully spawned child
process, pid 2387
01-09 16:01:46 [2113] info: spamd: server successfully spawned child
process, pid 2388
01-09 16:01:46 [2113] info: prefork: child states: II
These are the only entries since the last reboot...
No SA scanning is happening then, as you've said.
Shouldn't the header line: scanners: attach: 1.4.0 clamav:
0.96.3/m:53/d:12497 also show spamd though? In other posts that I'd found
in the archive, there was a notation on that line that indicated
spamassassin was invoked...
Yes is should, now that I look back on things. I'm seeing this:
Received: by simscan 1.4.0 ppid: 31845, pid: 31846, t: 2.8534s
scanners: attach: 1.4.0 clamav: 0.96.5
/m:51/d:10306 spam: 3.2.5
I think it's odd that the 3rd line isn't indented like the 2nd, but I'm
seeing it now (missed the 3rd line before).
To me, it looks like qmlog spamd doesn't have any errors, but should it show
that messages were scanned too?
Right, it should show messages for each email that's scanned, like this:
01-09 19:39:32 [2535] info: prefork: child states: II
01-09 19:54:10 [30403] info: spamd: connection from tacs-mail.shubes.net
[127.0.0.1] at port 56763
01-09 19:54:10 [30403] info: spamd: processing message
<20110110025403.60073b708...@web4.breastcancer.org> for clamav:89
01-09 19:54:11 [30403] info: spamd: clean message (-2.9/3.7) for
clamav:89 in 0.8 seconds, 2509 bytes.
01-09 19:54:11 [30403] info: spamd: result: . -2 - AWL,BAYES_00
scantime=0.8,size=2509,user=clamav,uid=89,required_score=3.7,rhost=tacs-mail.shubes.net,raddr=127.0.0.1,rport=56763,mid=<20110110025403.60073b708...@web4.breastcancer.org>,bayes=0.000000,autolearn=ham
01-09 19:54:11 [2535] info: prefork: child states: II
I don't think spamassassin isn't running,
Right. The child states line in the log indicates that it's running.
You'll see those processing running (with ps) as well.
FWIW, I think that if spamd wasn't running and simscan tried to invoke
it, then qmail-smtp would fail with a (quite elusive and nondescript) qq
softfail message.
it just doesn't look like simscan is sending messages from qmail to
spamassassin...
Looks that way to me as well.
That's just a guess though...
And a good one.
Thanks again for your input!
Have you run
# qmailctl cdb
recently?
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
