RE: tracking down problem messages

2007-05-16 Thread Jean-Paul Natola



Jean-Paul Natola wrote:
 Ok I was able to track them and found that they are timing out after about
5
 mins- spamd is timing them out- I'm assuming its large messages that it is
 timing out on-  what  rule/acl would I need and WHERE would I enter it to
 tell SA to ignore or  not to scan anything over 1 meg.

This is a parameter to spamc, the -s parameter does this, and by default
spamc will not send anything over 500k to spamd.


So is it possible spamc is either A) not being called- or the B) the default
500k setting somehow got corrupted?



RE: tracking down problem messages

2007-05-16 Thread Duane Hill

On Wed, 16 May 2007, Jean-Paul Natola wrote:


Jean-Paul Natola wrote:

Ok I was able to track them and found that they are timing out after about

5

mins- spamd is timing them out- I'm assuming its large messages that it is
timing out on-  what  rule/acl would I need and WHERE would I enter it to
tell SA to ignore or  not to scan anything over 1 meg.


This is a parameter to spamc, the -s parameter does this, and by default
spamc will not send anything over 500k to spamd.


So is it possible spamc is either A) not being called- or the B) the default
500k setting somehow got corrupted?


Also, looking back in the archive, it looks like the following:

  condition = ${if {$message_size}{500k}{1}{0}}

could be placed under the spam checking ACL. Not quite sure where the ACL 
is as I do not use Exim.


P.s. You would substitue 500k for what ever size you want to scan.


Re: tracking down problem messages

2007-05-15 Thread Luis HernĂ¡n Otegui

How are you calling SA? procmail? Amavis? plugins? Which version are
you running? Most likely, the RBL checks are the reason for that
delays. Try setting

skip_rbl_checks 1

in the local.cf, then look over the statistics again. If scan times go
down, blame your nameserver...


Luix!

2007/5/15, Jean-Paul Natola [EMAIL PROTECTED]:

Hi everyone,

I'm seeing by the output of message analysis time that some messages must be
hanging up SA;

Total number of emails processed by the spam filter : 2019
Number of spams :  1108 ( 54.88%)
Number of clean messages:   911 ( 45.12%)
Average message analysis time   : 26.26 seconds
Average spam analysis time  : 21.65 seconds
Average clean message analysis time : 31.86 seconds
Average message score   :  4.71
Average spam score  : 23.39
Average clean message score :-18.02

How can I track the messages that are causing this to happen?








Jean-Paul Natola
Network Administrator
Information Technology
Family Care International
588 Broadway Suite 503
New York, NY 10012
Phone:212-941-5300 xt 36
Fax:  212-941-5563
Mailto: [EMAIL PROTECTED]





--
-
GNU-GPL: May The Source Be With You...
Linux Registered User #448382.
-


RE: tracking down problem messages

2007-05-15 Thread Jean-Paul Natola
Ok I was able to track them and found that they are timing out after about 5
mins- spamd is timing them out- I'm assuming its large messages that it is
timing out on-  what  rule/acl would I need and WHERE would I enter it to
tell SA to ignore or  not to scan anything over 1 meg.

Running 

FreeBSD 
EXIM
SA




Hi everyone,

I'm seeing by the output of message analysis time that some messages must be
hanging up SA;

Total number of emails processed by the spam filter : 2019
Number of spams :  1108 ( 54.88%)
Number of clean messages:   911 ( 45.12%)
Average message analysis time   : 26.26 seconds
Average spam analysis time  : 21.65 seconds
Average clean message analysis time : 31.86 seconds
Average message score   :  4.71
Average spam score  : 23.39
Average clean message score :-18.02

How can I track the messages that are causing this to happen?








Jean-Paul Natola
Network Administrator
Information Technology
Family Care International
588 Broadway Suite 503
New York, NY 10012
Phone:212-941-5300 xt 36
Fax:  212-941-5563
Mailto: [EMAIL PROTECTED]



Re: tracking down problem messages

2007-05-15 Thread Matt Kettler
Jean-Paul Natola wrote:
 Ok I was able to track them and found that they are timing out after about 5
 mins- spamd is timing them out- I'm assuming its large messages that it is
 timing out on-  what  rule/acl would I need and WHERE would I enter it to
 tell SA to ignore or  not to scan anything over 1 meg.

This is a parameter to spamc, the -s parameter does this, and by default
spamc will not send anything over 500k to spamd.