SpamAssassin error Interrupted system call

2009-06-02 Thread Luis campo

We have installed SpamAssassin 3.25 working with qmail Simscan ClamAV. 


The problem is that spam works a few minutes then let it pass all
messages giving a score of 0.00 in the log and see the siguientre
message: 

Jun  2 11:31:26 ServerAS spamc[7259]: connect to spamd on 172.16.0.14 
failed, retrying (#1 of 3): Interrupted system call

Jun  2 11:31:27 ServerAS spamc[7277]: connect to spamd on 172.16.0.14 
failed, retrying (#1 of 3): Interrupted system call

Jun  2 11:31:34 ServerAS spamc[7399]: connect to spamd on 172.16.0.14 
failed, retrying (#1 of 3): Interrupted system call


 What can be wrong?

Thanks

Luis

_
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx

SpamAssassin error Interrupted system call

2009-06-02 Thread Luis campo









We have installed SpamAssassin 3.25 working with qmail Simscan ClamAV. 


The problem is that spam works a few minutes then let it pass all
messages giving a score of 0.00 in the log and see the siguientre
message: 

Jun  2 11:31:26 ServerAS spamc[7259]: connect to spamd on 172.16.0.14 
failed, retrying (#1 of 3): Interrupted system call

Jun  2 11:31:27 ServerAS spamc[7277]: connect to spamd on 172.16.0.14 
failed, retrying (#1 of 3): Interrupted system call

Jun  2 11:31:34 ServerAS spamc[7399]: connect to spamd on 172.16.0.14 
failed, retrying (#1 of 3): Interrupted system call


 What can be wrong?

Thanks

Luis

Get news, entertainment and everything you care about at Live.com. Check it out!
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

FW: SpamAssassin error Interrupted system call

2009-06-03 Thread Luis campo

The service is still active spamd just does not process the emails, all giving 
a score of zero and then get the error message 

 ServerA spamc [7277]: connect to spamd on 172.16.0.14 
 > Failed, retrying (# 1 of 3): Interrupted system call 

 When this problem occurs restarted spamd and runs approximately 20 minutes and 
then switch back to the same problem.

that might be happening.
thanks





> Date: Tue, 2 Jun 2009 16:33:39 -0700
> From: jhar...@impsec.org
> To: lcr_2...@hotmail.com
> CC: users@spamassassin.apache.org
> Subject: Re: SpamAssassin error Interrupted system call
> 
> On Tue, 2 Jun 2009, Luis campo wrote:
> 
> > We have installed SpamAssassin 3.25 working with qmail Simscan ClamAV.
> >
> > The problem is that spam works a few minutes then let it pass all
> > messages giving a score of 0.00 in the log and see the siguientre
> > message:
> >
> > Jun  2 11:31:26 ServerAS spamc[7259]: connect to spamd on 172.16.0.14
> > failed, retrying (#1 of 3): Interrupted system call
> >
> > Jun  2 11:31:27 ServerAS spamc[7277]: connect to spamd on 172.16.0.14
> > failed, retrying (#1 of 3): Interrupted system call
> >
> > Jun  2 11:31:34 ServerAS spamc[7399]: connect to spamd on 172.16.0.14
> > failed, retrying (#1 of 3): Interrupted system call
> 
> At that point, is spamd still running?
> 
> If it is not, is there anything in the log indicating why spamd died?
> 
> Does restarting spamd make it start working again?
> 
> Does it die again after a few minutes?
> 
> -- 
>   John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
>   jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
>   key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> ---
>When I say "I don't want the government to do X", do not
>automatically assume that means I don't want X to happen.
> ---
>   4 days until the 65th anniversary of D-Day

_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

FW: SpamAssassin error Interrupted system call

2009-06-03 Thread Luis campo

Is spamd running on the same machine? 

 if spamd is running on the same machine. 

 Does the maillog file on the machine running spamd log have any messages 
 that might indicate problems at the time the error occurred? 

  mailog I get this: 

 ServerA spamc [7277]: connect to spamd on 172.16.0.14 
 >> Failed, retrying (# 1 of 3): Interrupted system call 

 How much memory does the system have spamd? 

 1GB memory, these are the options to lift the SA 

 / usr / bin / spamd-v-u vpopmail-m 10-x-q-s stderr-r / var / run / spamd / 
spamd.pid \ 
 172.16.10.9-A-i 172.16.10.0/24 2> & 1 | \ 
 / usr / local / bin / setuidgid qmaill \ 
 / usr / local / bin / multilog t! spamdappend / var / log / qmail / 
spamd & 
 echo "spamd started" 
 ;; 
 

 Spamassassin _ever_ Has worked reliably for you? In other words, is this 
 the first time you've used SA 3.2.5 and it's always had this problem, or 
 SA 3.2.5 was working well for a long time and then it started failing? 

 We have recently installed S.A


thanks

> Date: Wed, 3 Jun 2009 11:23:55 -0700
> From: jhar...@impsec.org
> To: lcr_2...@hotmail.com
> CC: users@spamassassin.apache.org
> Subject: Re: FW: SpamAssassin error Interrupted system call
> 
> On Wed, 3 Jun 2009, Luis campo wrote:
> 
> > The service is still active spamd just does not process the emails, all 
> > giving a score of zero and then get the error message
> >
> > ServerA spamc [7277]: connect to spamd on 172.16.0.14
> > > Failed, retrying (# 1 of 3): Interrupted system call
> >
> > When this problem occurs restarted spamd and runs approximately 20 
> > minutes and then switch back to the same problem.
> 
> Is spamd running on the same machine?
> 
> Does the maillog file on the machine running spamd have any log messages 
> that might indicate problems at the time the error occurred?
> 
> How much memory does the spamd system have?
> 
> Has spamassassin _ever_ worked reliably for you? In other words, is this 
> the first time you've used SA 3.2.5 and it's always had this problem, or 
> was SA 3.2.5 working well for a long time and then it started failing?
> 
> -- 
>   John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
>   jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
>   key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> ---
>...to announce there must be no criticism of the President or to
>stand by the President right or wrong is not only unpatriotic and
>servile, but is morally treasonous to the American public.
>-- Theodore Roosevelt, 1918
> ---
>   3 days until the 65th anniversary of D-Day

_
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx

FW: SpamAssassin error Interrupted system call

2009-06-03 Thread Luis campo

this is an example of var / log / qmail / spamd

2009-06-03 12:00:16.471682500 [775] info: spamd: result: Y 15 - 
DCC_CHECK,DIGEST_MULTIPLE,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_DATE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RDNS_NONE,URIBL_BLACK
 
scantime=8.3,size=5837,user=fri...@ec-red.com,uid=89,required_score=3.0,rhost=172.16.10.9,raddr=172.16.10.9,rport=47584,mid=<789509335664072.ftlwktkqdskf...@[85.94.122.108]>,autolearn=spam
2009-06-03 12:00:16.531889500 [19168] info: prefork: child states: BB
2009-06-03 12:00:16.531949500 [19168] info: prefork: server reached 
--max-children setting, consider raising it
2009-06-03 12:00:16.532795500 [775] info: spamd: connection from 172.16.10.9 
[172.16.10.9] at port 47627
2009-06-03 12:00:16.539592500 [775] info: spamd: processing message 
<681817609314036.lookodpmenua...@[77.46.200.182]> for alon...@ec-red.com:89
2009-06-03 12:00:17.297901500 [465] info: spamd: connection from 172.16.10.9 
[172.16.10.9] at port 47585
2009-06-03 12:00:17.309708500 [465] info: spamd: processing message 
<750498094511669.wuwknxlfxaay...@79-127-177-163.infos.cz> for 
cogir...@ec-red.com:89
2009-06-03 12:00:24.118725500 [461] info: spamd: identified spam (13.2/3.0) for 
simscan:89 in 9.1 seconds, 3818 bytes.
2009-06-03 12:00:24.118733500 [461] info: spamd: result: Y 13 - 
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,HTML_IMAGE_ONLY_28,HTML_IMAGE_RATIO_04,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_HEADERS,MISSING_MID,SUBJECT_NEEDS_ENCODING,XMAILER_MIMEOLE_OL_1ECD5
 
scantime=9.1,size=3818,user=simscan,uid=89,required_score=3.0,rhost=172.16.10.9,raddr=172.16.10.9,rport=47624,mid=(unknown),autolearn=spam
2009-06-03 12:00:24.198431500 [19168] info: prefork: child states: BB
2009-06-03 12:00:24.198439500 [19168] info: prefork: server reached 
--max-children setting, consider raising it
2009-06-03 12:00:24.200486500 [461] info: spamd: connection from 172.16.10.9 
[172.16.10.9] at port 47634
2009-06-03 12:00:24.209833500 [461] info: spamd: processing message 
<805375003508652.nutumowvvhaw...@88-123-14-217.rev.libertysurf.net> for 
gggde...@ec-red.com:89
2009-06-03 12:00:24.422375500 [2879] info: spamd: identified spam (4.1/3.0) for 
chama...@ec-red.com:89 in 12.5 seconds, 3108 bytes.
2009-06-03 12:00:24.422647500 [2879] info: spamd: result: Y 4 - 
HTML_IMAGE_ONLY_24,HTML_MESSAGE,MIME_HTML_ONLY,URIBL_GREY 
scantime=12.5,size=3108,user=chama...@ec-red.com,uid=89,required_score=3.0,rhost=172.16.10.9,raddr=172.16.10.9,rport=47591,mid=<101318875i.623112.promoti...@qphotels.com>,autolearn=no
2009-06-03 12:00:24.489537500 [19168] info: prefork: child states: BB
2009-06-03 12:00:24.646170500 [19168] info: prefork: server reached 
--max-children setting, consider raising it
2009-06-03 12:00:24.646178500 [2879] info: spamd: connection from 172.16.10.9 
[172.16.10.9] at port 47635
2009-06-03 12:00:24.654211500 [2879] info: spamd: processing message 
<20090603165216.5f29b589bb...@calmar.terra.com> for boxshirt...@ec-red.com:89
2009-06-03 12:00:25.276619500 [3526] info: spamd: identified spam (20.0/3.0) 
for interv...@ec-red.com:89 in 11.5 seconds, 4812 bytes.
2009-06-03 12:00:25.276816500 [3526] info: spamd: result: Y 19 - 
HS_INDEX_PARAM,HTML_IMAGE_RATIO_04,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_DATE,MISSING_MID,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_NUMERIC_HELO,RDNS_DYNAMIC,URIBL_BLACK,URIBL_JP_SURBL,URIBL_WS_SURBL
 
scantime=11.5,size=4812,user=interv...@ec-red.com,uid=89,required_score=3.0,rhost=172.16.10.9,raddr=172.16.10.9,rport=47612,mid=(unknown),autolearn=spam
2009-06-03 12:00:25.336575500 [19168] info: prefork: child states: BB
2009-06-03 12:00:25.336639500 [19168] info: prefork: server reached 
--max-children setting, consider raising it
2009-06-03 12:00:25.338169500 [3526] info: spamd: connection from 172.16.10.9 
[172.16.10.9] at port 47637
2009-06-03 12:00:25.344874500 [3526] info: spamd: processing message 
<366318011138546.ktjcplvcuemy...@avu214.neoplus.adsl.tpnet.pl> for 
gve...@ec-red.com:89

you said we have 3 mx with each SA, which work well only 2 and 3 is where the 
error comes, 
 If influence on our server reaches around 75,000 emails received daily.



> Date: Wed, 3 Jun 2009 13:09:45 -0700
> From: jhar...@impsec.org
> To: lcr_2...@hotmail.com
> CC: users@spamassassin.apache.org
> Subject: Re: FW: SpamAssassin error Interrupted system call
> 
> On Wed, 3 Jun 2009, Luis campo wrote:
> 
> >> Is spamd running on the same machine?
> >
> > if spamd is running on the same machine.
> >
> >> Does the maillog file on the machine running spamd log have any 
> >> messages that might indicate problems at the time the error occurred?
> >
> >  mailog I get this:
> >
> > ServerA spamc [7277]: connect to spamd on 172.16.0.14
> > Failed, retrying (# 1 of 3): Interrupted system call
> 

FW: SpamAssassin error Interrupted system call

2009-06-03 Thread Luis campo

We have increased the 20 as well as samples: 

 / usr / bin / spamd-v-u vpopmail-m 20-x-q-s stderr-r / var / run / spamd / 
spamd.pid \ 
172.16.10.9-A-i 172.16.10.0/24 2> & 1 | \ 
/ usr / local / bin / setuidgid qmaill \ 
/ usr / local / bin / multilog t! spamdappend / var / log / qmail / 
spamd & 
echo "spamd started" 
;; 

 In simscan have configured as follows 


. / configure - enable-clamav = y - enable-clamdscan = / usr / local /
bin / clamdscan - enable-dropmsg = y - enable-custom-smtp-reject = n 

- enable-per-domain = y - enable-attach = y - enable-spam = y -
enable-ripmime = / usr / local / bin / ripmime - enable-received = y -
enable - 
 spam-hits = 5.0 - enable-spamc = / usr / bin / spamc -
enable-spamc-args =- s 20-t 60-d
172.16.10.9,172.16.10.14,172.16.10.15 - ena 
 ble-spamc-user = y - enable-regex = and - with-pcre-include = / usr / local / 
include


On the other hand I'd like to show the configuration loca.cf sA

ok_locales all
skip_rbl_checks 1

#Con esto evalua cada  mensaje, se requiere un 5.0 para marcarlo como spam
required_hits 3
#Que realice reporte de mensaje
report_safe 0
#Sobreescriba el subjetc
rewrite_header Subject ***SPAM***



#Usas pyzor si lo tienes, pero lo bajas desde cpan
use_pyzor 1
use_razor2 1
dcc_path /usr/local/bin/dccproc
dcc_home /var/dcc
dcc_body_max 99
dcc_timeout 10
dcc_fuz1_max 99
dcc_fuz2_max 99

#Inicias las funcionalidades del spamassassin
use_auto_whitelist 1

use_bayes 1
use_bayes_rules 1
bayes_auto_learn 1
bayes_auto_learn_threshold_nonspam 0.1
bayes_auto_learn_threshold_spam 12

##

user_scores_dsn DBI:mysql:spamassassin:localhost
user_scores_sql_usernamespamuser
user_scores_sql_passwordspampass
user_scores_sql_custom_querySELECT preference, value FROM _TABLE_ WHERE  
username = '$GLOBAL' OR username = CONCAT('%',_DO
MAIN_) OR username = _USERNAME_ ORDER BY username ASC

auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList
user_awl_dsnDBI:mysql:spamassassin:localhost
user_awl_sql_username   spamuser
user_awl_sql_password   spampass
user_awl_sql_table  awl

bayes_store_module  Mail::SpamAssassin::BayesStore::MySQL
bayes_sql_dsn   DBI:mysql:spamassassin:localhost
bayes_sql_username  spamuser
bayes_sql_password  spampass

#

# Modified default scores
score BAYES_99 5.5  # 5.4
score RAZOR2_CHECK 2.5  # 0.899
score RAZOR2_CF_RANGE_51_100 4.5# 1.552
score RAZOR2_CF_RANGE_11_50 1.5 # 0.559
score DCC_CHECK 3.0 # 1.806
score PYZOR_CHECK 3.0   # 0.322






> Subject: Re: FW: SpamAssassin error Interrupted system call
> From: guent...@rudersport.de
> To: users@spamassassin.apache.org
> Date: Thu, 4 Jun 2009 00:29:06 +0200
> 
> On Wed, 2009-06-03 at 22:00 +, Luis campo wrote:
> > this is an example of var / log / qmail / spamd
> > 
> > 2009-06-03 12:00:16.471682500 [775] info: spamd: result: Y 15 -
> > DCC_CHECK,DIGEST_MULTIPLE,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_DATE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RDNS_NONE,URIBL_BLACK
> >  
> > scantime=8.3,size=5837,user=fri...@ec-red.com,uid=89,required_score=3.0,rhost=172.16.10.9,raddr=172.16.10.9,rport=47584,mid=<789509335664072.ftlwktkqdskf...@[85.94.122.108]>,autolearn=spam
> 
> Something is working, somehow...
> 
> > 2009-06-03 12:00:16.531889500 [19168] info: prefork: child states: 
> > BB
> > 2009-06-03 12:00:16.531949500 [19168] info: prefork: server reached 
> > --max-children setting, consider raising it
> 
> There's your problem.
> 
> You got 10 spamd children, all BUSY. That's what the 'B's mean.
> 
> Since you got 1 GByte of RAM, you could try increasing the number of
> children. *Slowly*. If you exceed what your system's RAM can handle,
> you'll hit swap and thrashing will kill the server.
> 
> Hmm, given this occurs after a while of operation only, that might be
> exactly it. Swap thrashing? What does the command 'free' return?
> 
> 
> Another possibility is, that you are scanning all messages regardless,
> including really *large* messages. You shouldn't scan messages larger
> than, say, 0.5 MByte.
> 
> The scantime of 8-10s is somewhat reasonable, probably caused by the
> issue we're trying to nail. With normal operation and the hardware
> capable of running the children, it should be considerably lower, like a
> few seconds aver

FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Luis campo

we have made with the configuration option-x

./configure --enable-clamav=y --enable-clamdscan=/usr/local/bin/clamdscan 
--enable-dropmsg=y --enable-custom-smtp-reject=n --enable-per-domain=y 
--enable-attach=y --enable-spam=y --enable-ripmime=/usr/local/bin/ripmime 
--enable-received=y --enable-spam-hits=5.0 --enable-spamc=/usr/bin/spamc 
--enable-spamc-args="-x -d 172.16.10.9" --enable-spamc-user=y --enable-regex=y 
--with-pcre-include=/usr/local/include

 memory before the crash SA

   total   used   free sharedbuffers cached
Mem:   10334681012956  20512  0  71440 270720
-/+ buffers/cache: 670796 362672
Swap:  2031608  02031608


works for a few minutes then stops again

@40004a27f6b60c9922c4 simscan:[26843]:CLEAN (0.00/3.00):112.9283s:: 
@40004a27f6b60ea04d04 simscan:[23571]:CLEAN (0.00/3.00):221.3648s:: 
@40004a27f6b61000ac0c simscan:[23679]:CLEAN (0.00/3.00):218.1913s:: 
@40004a27f6b6291b8d4c simscan:[22930]:CLEAN (0.00/3.00):242.5665s:: 
@40004a27f6b62c46770c simscan:[28731]:CLEAN (0.00/3.00):30.6124s:: 

memory after the fall SA
  total   used   free sharedbuffers cached
Mem:   1033468 531860 501608  0  26700 147200
-/+ buffers/cache: 357960 675508
Swap:  2031608  136842017924





> Date: Wed, 3 Jun 2009 15:57:08 -0700
> From: jhar...@impsec.org
> To: lcr_2...@hotmail.com
> CC: users@spamassassin.apache.org
> Subject: Re: FW: SpamAssassin error Interrupted system call
> 
> On Wed, 3 Jun 2009, Luis campo wrote:
> 
> > this is an example of var / log / qmail / spamd
> >
> > 2009-06-03 12:00:16.531889500 [19168] info: prefork: child states: 
> > BB
> > 2009-06-03 12:00:16.531949500 [19168] info: prefork: server reached 
> > --max-children setting, consider raising it
> 
> There is a problem. You're overloaded. I don't know if spamd being 
> overloaded would result in spamc reporting interrupted system calls, but 
> that would explain the behaviour you are seeing:
> 
> > The problem is that spam works a few minutes then let it pass all 
> > messages giving a score of 0.00 in the log
> 
> From the spamc man page:
> 
>-t timeout, --timeout=timeout
>  Set the timeout for spamc-to-spamd communications (default: 600, 0
>  disables).  If spamd takes longer than this many seconds to reply to
>  a message, spamc will abort the connection and treat this as a
>  failure to connect; in other words the message will be returned
>  unprocessed.
> 
> "unprocessed" == "score of zero".
> 
> You might try using spamc's "-x" option, which will tell qmail that spamd 
> is overloaded rather than skipping the scan. I don't know how simscan will 
> respond, but it's likely the messages would be queued for retry. Messages 
> would take longer to be delivered, but they would all be scanned.
> 
> > you said we have 3 mx with each SA, which work well only 2 and 3 is 
> > where the error comes, If influence on our server reaches around 75,000 
> > emails received daily.
> 
> You may want to add memory and increase the number of child processes.
> 
> Are you using any DNSBLs to reduce load within qmail at SMTP time, before 
> the messages get passed off to SA for scoring?
> 
> -- 
>   John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
>   jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
>   key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
> ---
>Our government should bear in mind the fact that the American
>Revolution was touched off by the then-current government
>attempting to confiscate firearms from the people.
> ---
>   3 days until the 65th anniversary of D-Day

_
Explore the seven wonders of the world
http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE

FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Luis campo

yes, we have configured the SA to 20 children


/usr/bin/spamd -v -u vpopmail -m 20 -x -q -s stderr -r /var/run/spamd/spamd.pid 
\
-i 172.16.10.9 -A 172.16.10.0/24 2>&1 | \
/usr/local/bin/setuidgid qmaill \
/usr/local/bin/multilog t !spamdappend /var/log/qmail/spamd &
echo "spamd started"
;;

memory rises after the spamd stopped working


> Subject: Re: FW: SpamAssassin error Interrupted system call
> From: guent...@rudersport.de
> To: users@spamassassin.apache.org
> Date: Thu, 4 Jun 2009 23:50:10 +0200
> 
> On Thu, 2009-06-04 at 17:18 +, Luis campo wrote:
> >  total   used   free sharedbuffers cached
> > Mem:   10334681012956  20512  0  71440 270720
> > -/+ buffers/cache: 670796 362672
> > Swap:  2031608  02031608
> 
> OK, no swap usage initially.
> 
> > works for a few minutes then stops again
> 
> A few minutes. When originally reporting the issue, you mentioned 20
> minutes. So, did the operational time decrease, since you doubled the
> spamd children to 20?
> 
> > @40004a27f6b60c9922c4 simscan:[26843]:CLEAN (0.00/3.00):112.9283s:: 
> > @40004a27f6b60ea04d04 simscan:[23571]:CLEAN (0.00/3.00):221.3648s:: 
> 
> That's *much* more time than you reported before. Both might hint you
> actually are hitting swap.
> 
> 
> >  total   used   free sharedbuffers cached
> > Mem:   1033468 531860 501608  0  26700 147200
> > -/+ buffers/cache: 357960 675508
> > Swap:  2031608  136842017924
> 
> Hmm, these after figures are slightly odd. I take it you got that after
> killing spamd?
> 
> Yeah, there you are using swap. Not much, but then again lots of your
> physical memory has been freed, too. So that probably could just be a
> timing issue -- numbers /while/ spamd turns unresponsive would be more
> revealing.
> 
> Anyway, yes -- I agree it looks like a swap problem. Bringing up 10
> additional spamd children with a Gig of memory seriously didn't help at
> all. I'd try as Bowie suggested.
> 
> 
> Also, some questions remain un-answered.  (a) Do you scan *all*
> messages, regardless of their size? Don't do that, but skip scanning for
> messages larger than about 500 kByte. Scanning large messages consumes
> lots of RAM, and will amplify your problem.  (b) Do you have any third-
> party rule-sets or plugins enabled?
> 
> 
> -- 
> char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
> main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
> 

_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

RBL error with SA

2009-09-22 Thread Luis campo

hi,

 

I set to work with RBL Spamassasin by skip_rbl_checks option 0. 

But in my statistics were not reporting any RBL test 
 
Run spamassassin-D-lint 
 
And these messages came out

 

[5563] dbg: dns: no ipv6
[5563] dbg: dns: is Net::DNS::Resolver available? yes
[5563] dbg: dns: Net::DNS version: 0.61
[4315] dbg: dns: is_dns_available() last checked 1253631680.0 seconds ago; 
re-checking
[4315] dbg: dns: is DNS available? 0
[4315] dbg: rules: local tests only, ignoring RBL eval  
  
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

Report in header of SPAM emails

2009-09-23 Thread Luis campo

Dear Sirs, 

As configure SA to emails that have been submitted to the QUARANTINE directory 
containing the report SA in the header.

 

Thanks

 

Luis Campo
  
_
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx

RE: Report in header of SPAM emails

2009-09-23 Thread Luis campo

I was referring to the following: 

I have found that emails that have been filtered by SPAM and have been placed 
in the Quarantine folder in the header are not report of SpamAssassin. 

I want to know about the rules and scores assigned by SpamAssassin to those 
e-mails filtered.
 
Thanks
 
Luis

 
> From: ja...@iki.fi
> To: users@spamassassin.apache.org
> Subject: Re: Report in header of SPAM emails
> Date: Wed, 23 Sep 2009 21:54:11 +0300
> 
> 
> > As configure SA to emails that have been submitted to the
> > QUARANTINE directory containing the report SA in the
> > header. 
> > 
> > Huh?
> 
> Language barrier.
> 
> Maybe he sees now the spam going to quarantine folder by amavisd-new or 
> similar (do they do that to spam too, I don't know), and wants that changed 
> to a report in the headers.
> 
> Or the other way around?
> 
> Or maybe they do not need/use words in the planet he came from. We need a 
> picture.
  
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

RE: Report in header of SPAM emails

2009-09-23 Thread Luis campo

dears Srs,

 


I have added the option report_safe 1, but the mail deposited in the quarantine 
folder 

not have any attached and SA report

 

Do not use the amavis, if not the simscan

 

 

thanks

 

Luis Campo

Do not use the amavis, if not the simscan
> Subject: Re: Report in header of SPAM emails
> From: mar...@gregorie.org
> To: users@spamassassin.apache.org
> Date: Wed, 23 Sep 2009 21:00:19 +0100
> 
> On Wed, 2009-09-23 at 22:19 +0300, Jari Fredriksson wrote:
> > > I was referring to the following:
> > > 
> > > I have found that emails that have been filtered by SPAM
> > > and have been placed in the Quarantine folder in the
> > > header are not report of SpamAssassin. 
> > > 
> > > I want to know about the rules and scores assigned by
> > > SpamAssassin to those e-mails filtered. 
> > > 
> Add this parameter to local.cf:
> 
> report_safe 1
> 
> and all quarantined messages will be converted to attachments to a mail
> message that contains a report of all rules that were hit and their
> scores. I think this is what you were asking for but this DOES NOT work
> with amavis. 
> 
> If the quarantining is done by amavis you should follow the advice given
> below by Jari and configure it, not spamasassin, to generate the report.
> 
> 
> Martin
> 
> > 
> > SpamAssassin itself does not place anything in any Quarantine folders, SA 
> > does not have such concept at all.
> > 
> > If you are using amavisd-new, which apparntly can do that, then I googled 
> > this for you
> > 
> > > When calling SA via amavisd-new, header editing is handled strictly by
> > > amavisd-new, not SA (see 
> > > http://www.ijs.si/software/amavisd/#faq-spam). You
> > > can get amavisd-new to add the SA report to the headers, which should
> > > include the autolearn header, by adding (or uncommenting) the 
> > > following in
> > > your amavisd.conf:
> > > 
> > > $sa_spam_report_header = 1; # insert X-Spam-Report header 
> > > field? default
> > > false
> > > 
> > > Beware, this will add lots of additional header lines to your 
> > > messages.
> > > 
> 
> 
  
_
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

RE: Report in header of SPAM emails

2009-09-25 Thread Luis campo

Hello 

if I restarted the spamd
 

greetings

 


 
> From: ja...@iki.fi
> To: users@spamassassin.apache.org
> Subject: Re: Report in header of SPAM emails
> Date: Thu, 24 Sep 2009 15:58:58 +0300
> 
> > dears Srs,
> > 
> > 
> > I have added the option report_safe 1, but the mail
> > deposited in the quarantine folder 
> > not have any attached and SA report
> > 
> > Do not use the amavis, if not the simscan
> > 
> 
> Did you restart Spamd after the change?
  
_
Explore the seven wonders of the world
http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE

Problem with SA

2009-09-29 Thread Luis campo


Dear Sirs, 

I have a problem with the SA, I have added the option Spam-x since that time 
the SA is no return emails, no subject or message body, 

prodria be the problem which.
 
 
greetings 
_
Discover the new Windows Vista
http://search.msn.com/results.aspx?q=windows+vista&mkt=en-US&form=QBRE