Re: spamassassin ocassionally skips network-checks
- "Jonas Eckerman" schrieb: > > Are you sure it forgot to do the tests, or is it just that there > sometimes are no hits from DNSL tests that should have hit? > > If the latter, this might indicate that your DNS is sometimes > overloaded > or slow for some other reason, and what you are seeing is the results > of > DNS timeouts. > > Can you see if the relevant messages took more than normal time to > scan? > my milter logs the total time it takes to process a mail. The mails in question have actually quite short process-times. around 2-3 seconds from the first HELO to the final CLOSE and in between there is the whole spam-check (and some other internal checks). So timeout is not a problem here. damn. I really wonder whats going on here. I'll keep on investigating ... thnx peter > Regards > /Jonas > > -- > Jonas Eckerman > Fruktträdet & Förbundet Sveriges Dövblinda > http://www.fsdb.org/ > http://www.frukt.org/ > http://whatever.frukt.org/
Re: spamassassin ocassionally skips network-checks
- "Matus UHLAR - fantomas" schrieb: > > Are you sure you did not disable (or, did enable) network checks? Some > of > them have to be enabled, some need additional software installed > (razor, > pyzor, dcc)... > yes. I'm sure. As I wrote in my original posting on most of the emails the network-checks are performed as intended and configured. Only on a few they are not. If I take a mail where no network-checks was applied and feed it manually to spamassassin again then the network-checks are performed and the mail is detected as spam. My problem is: approx 1 out of 100 mails that are checked via Mail::SpamAssassin-Module is not checked against the network-tests that I configured thnx, peter
Re: spamassassin ocassionally skips network-checks
> - "Matus UHLAR - fantomas" schrieb: > > you apre probable one of "early recipients" in such cases - the spam > > started spreading, IP was not listed in blacklists, checksums weren't in > > *ZOR or DCC databases. I'm afraid only BAYES and other rules may catch > > that... On 23.05.09 12:44, peter pilsl wrote: > thnx for your answer, but thats not the problem here. There are mails that > are relayed to my server via MX-backup where another > spamassassin-installation checks for spam also. > In this case the mail is spam-checked by spamassassin twice. And the > mx-backup gives a high spamscore (and performs the network-checks) and my > spamassassin doesnt. Are you sure you did not disable (or, did enable) network checks? Some of them have to be enabled, some need additional software installed (razor, pyzor, dcc)... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Microsoft dick is soft to do no harm
Re: spamassassin ocassionally skips network-checks
- "Matus UHLAR - fantomas" schrieb: > > you apre probable one of "early recipients" in such cases - the spam > started > spreading, IP was not listed in blacklists, checksums weren't in *ZOR > or DCC > databases. I'm afraid only BAYES and other rules may catch that... > thnx for your answer, but thats not the problem here. There are mails that are relayed to my server via MX-backup where another spamassassin-installation checks for spam also. In this case the mail is spam-checked by spamassassin twice. And the mx-backup gives a high spamscore (and performs the network-checks) and my spamassassin doesnt. thats why I started wondering .. best, peter > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > Linux IS user friendly, it's just selective who its friends are...
Re: spamassassin ocassionally skips network-checks
On 22.05.09 16:59, peter pilsl wrote: > But occassionally spam comes through where it seems that spamassassin just > "forgot" to do all the network-checks (spamcop, sorbs, dcc, razor2) and > therefore the score is low and the mail gets through. > > When I run spamassassin on the same mail later its marked as spam and on > most of my mail the spamassassin-milter runs these network-checks. But on > some it simply doesnt and I cant figure out. Didnt find any pattern yet > and no error in any log. [...] > any idea how this could happen? or how can I debug this problem? you apre probable one of "early recipients" in such cases - the spam started spreading, IP was not listed in blacklists, checksums weren't in *ZOR or DCC databases. I'm afraid only BAYES and other rules may catch that... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Linux IS user friendly, it's just selective who its friends are...
