SARE rules (was: Re: SA Not Scoring)
Max de Mendizabal schrieb: Dear all, I have a very rare problem: if I do not use the SARE rules everythings works ok but... If I run sa-update Then spamassassin stops working. If I check it with spamassassin -D < spam-mail.txt Works ok, but if I use spamc < spam-mail.txt Shows the spamassassin version on the header, but doesn't make the scoring. Any Ideas? Yours Max On Wed, 2 May 2007, Keith De Souza wrote: Hello, I'm new to this mailing list, please let me know if I'm doing anything wrong with submitting A problem here. I'm running SpamAssassin version 3.1.8 running on Perl version 5.8.8 the OS that is running on Fedora Core 5. The problem that I'm having is every so often when mail come in, it seems to skip SA scanning. Here what the logs say: Sat, 28 Apr 2007 19:42:53 BST:21005: SA: required_hits ? / sa_quarantine +0.01 / sa_delete +2.4 Sat, 28 Apr 2007 19:42:53 BST:21005: SA: finished scan of dir "/var/spool/qmailscan/tmp/ssdd117778517072221005" in 600.013176 secs - hits=?/? Sat, 28 Apr 2007 19:42:53 BST:21005: qmail-scanner: Clear:RC:0(67.186.37.67):SA:0(?/?): 602.343095 3106 overtaxingpinafore @internetdynamics.com [EMAIL PROTECTED] Re: <[EMAIL PROTECTED]> textfile0:46 textfile1:468 textfile2:1145 This does not happen all the time but once in a while my log show a batch of mail not being scanned and producing false negatives, I don't know why that is. Is there any possibility that my server is overloaded and spamd is unable to spawn sufficient child process to handle the incoming mail. Just a logical guess. Any help on this is much appreciated. spamassassin --lint should report you the broken rules ... Perhaps you use a new thread next time? ;-). Cheers Keith -- hth MH Dont send mail to: [EMAIL PROTECTED] --
Re: SA Not Scoring
Dear all, I have a very rare problem: if I do not use the SARE rules everythings works ok but... If I run sa-update Then spamassassin stops working. If I check it with spamassassin -D < spam-mail.txt Works ok, but if I use spamc < spam-mail.txt Shows the spamassassin version on the header, but doesn't make the scoring. Any Ideas? Yours Max On Wed, 2 May 2007, Keith De Souza wrote: Hello, I'm new to this mailing list, please let me know if I'm doing anything wrong with submitting A problem here. I'm running SpamAssassin version 3.1.8 running on Perl version 5.8.8 the OS that is running on Fedora Core 5. The problem that I'm having is every so often when mail come in, it seems to skip SA scanning. Here what the logs say: Sat, 28 Apr 2007 19:42:53 BST:21005: SA: required_hits ? / sa_quarantine +0.01 / sa_delete +2.4 Sat, 28 Apr 2007 19:42:53 BST:21005: SA: finished scan of dir "/var/spool/qmailscan/tmp/ssdd117778517072221005" in 600.013176 secs - hits=?/? Sat, 28 Apr 2007 19:42:53 BST:21005: qmail-scanner: Clear:RC:0(67.186.37.67):SA:0(?/?): 602.343095 3106 overtaxingpinafore @internetdynamics.com [EMAIL PROTECTED] Re: <[EMAIL PROTECTED]> textfile0:46 textfile1:468 textfile2:1145 This does not happen all the time but once in a while my log show a batch of mail not being scanned and producing false negatives, I don't know why that is. Is there any possibility that my server is overloaded and spamd is unable to spawn sufficient child process to handle the incoming mail. Just a logical guess. Any help on this is much appreciated. Cheers Keith -- --- Max de Mendiz�bal Subdirecci�n de Inform�tica Universidad Pedag�gica Nacional
RE: SA Not Scoring
Hi Matthias, Many thanks for this, I'm very new to SA and your distribution is much appreciated. Cheers Keith -Original Message- From: Matthias Haegele [mailto:[EMAIL PROTECTED] Sent: 03 May 2007 10:08 To: Keith De Souza Subject: Re: SA Not Scoring Keith De Souza schrieb: > Hi Matthias, > > Thanks for you input with this, I will be reading it soon. e.g.: for testing razor2 u could run this spamassassin -t -D razor2 < /path/to/a/message spamassassin -t -D < /path/to/a/message or spamassassin -D (it will block your terminal) and parallel send some testmails > Cheers > > Keith hth MH > -Original Message- > From: Matthias Haegele [mailto:[EMAIL PROTECTED] > Sent: 03 May 2007 07:40 > To: Keith De Souza > Subject: Re: SA Not Scoring > > Keith De Souza schrieb: >> Hi Jason, >> >> Thanks for this, I'm presuming I should be reading >> http://qmail-scanner.sourceforge.net/FAQ.php. Any ideas how I can find out >> if >> Spamd is hanging on DNS? My SA is running on Fedora Core 5 OS. > > use the debug switches (see docu, manpages) ... > > -- Grüsse/Greetings MH Dont send mail to: [EMAIL PROTECTED] --
RE: SA Not Scoring
Hi Matthias, Thanks for you input with this, I will be reading it soon. Cheers Keith -Original Message- From: Matthias Haegele [mailto:[EMAIL PROTECTED] Sent: 03 May 2007 07:40 To: Keith De Souza Subject: Re: SA Not Scoring Keith De Souza schrieb: > Hi Jason, > > Thanks for this, I'm presuming I should be reading > http://qmail-scanner.sourceforge.net/FAQ.php. Any ideas how I can find out > if > Spamd is hanging on DNS? My SA is running on Fedora Core 5 OS. use the debug switches (see docu, manpages) ... -- Grüsse/Greetings MH Dont send mail to: [EMAIL PROTECTED] --
RE: SA Not Scoring
Hi Jason, Thanks for this, I'm presuming I should be reading http://qmail-scanner.sourceforge.net/FAQ.php. Any ideas how I can find out if Spamd is hanging on DNS? My SA is running on Fedora Core 5 OS. I will also be looking at updating qmail-scanner. Many thanks for your input. Cheers Keith -Original Message- From: Jason Haar [mailto:[EMAIL PROTECTED] Sent: 03 May 2007 00:31 To: users@spamassassin.apache.org Subject: Re: SA Not Scoring Keith De Souza wrote: > > > > > > Sat, 28 Apr 2007 19:42:53 BST:21005: SA: required_hits ? / > sa_quarantine +0.01 / sa_delete +2.4 > > Sat, 28 Apr 2007 19:42:53 BST:21005: SA: finished scan of dir > "/var/spool/qmailscan/tmp/ssdd117778517072221005" in 600.013176 secs > > - hits=?/? > > Sat, 28 Apr 2007 19:42:53 BST:21005: qmail-scanner: > Clear:RC:0(67.186.37.67):SA:0(?/?): 602.343095 3106 > overtaxingpinafore > > @internetdynamics.com [EMAIL PROTECTED] Re: > <[EMAIL PROTECTED]> textfile0:46 > > textfile1:468 textfile2:1145 > > > > > > This does not happen all the time but once in a while my log show a > batch of mail not being scanned and producing false negatives, I don't > know why that is. > > > > Is there any possibility that my server is overloaded and spamd is > unable to spawn sufficient child process to handle the incoming mail. > Just a logical guess. > > > Did you read the Qmail-Scanner FAQ - Q19? Look at the timestamp in there - 602 seconds. That means that message took 10 minutes to process - something is wrong with your system. Either it is overloaded or spamd is hanging on DNS (or other network) lookups. However, you say this only happens every once in a while - in which case that may be acceptable to you. Also "/var/spool/qmailscan" implies you're using a VERY old Q-S 1.X release... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
Re: SA Not Scoring
Keith De Souza wrote: > > > > > > Sat, 28 Apr 2007 19:42:53 BST:21005: SA: required_hits ? / > sa_quarantine +0.01 / sa_delete +2.4 > > Sat, 28 Apr 2007 19:42:53 BST:21005: SA: finished scan of dir > "/var/spool/qmailscan/tmp/ssdd117778517072221005" in 600.013176 secs > > - hits=?/? > > Sat, 28 Apr 2007 19:42:53 BST:21005: qmail-scanner: > Clear:RC:0(67.186.37.67):SA:0(?/?): 602.343095 3106 > overtaxingpinafore > > @internetdynamics.com [EMAIL PROTECTED] Re: > <[EMAIL PROTECTED]> textfile0:46 > > textfile1:468 textfile2:1145 > > > > > > This does not happen all the time but once in a while my log show a > batch of mail not being scanned and producing false negatives, I don’t > know why that is. > > > > Is there any possibility that my server is overloaded and spamd is > unable to spawn sufficient child process to handle the incoming mail. > Just a logical guess. > > > Did you read the Qmail-Scanner FAQ - Q19? Look at the timestamp in there - 602 seconds. That means that message took 10 minutes to process - something is wrong with your system. Either it is overloaded or spamd is hanging on DNS (or other network) lookups. However, you say this only happens every once in a while - in which case that may be acceptable to you. Also "/var/spool/qmailscan" implies you're using a VERY old Q-S 1.X release... -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
