FW: spamd scan problem

2006-10-27 Thread Frank van den Diepstraten
(sorry for duplicate mails)

Hi all,

I've got a question about spamassasin. I've got 2 mailservers with an
identical installation. But 1 of the servers is a bit slow. When I searched
I found the problem in the scantime. After the data command it takes about
0,6sec. to scan a message on the "good" system and about 4.0 seconds on the
"bad" system. Here's an example:

"good" system:

Oct 27 09:43:42 smtp-1 spamd[17109]: checking message
<[EMAIL PROTECTED]> for *:65534.
Oct 27 09:43:42 smtp-1 spamd[17109]: clean message (1.7/5.0) for *:65534 in
0.2 seconds, 16625 bytes.
Oct 27 09:43:42 smtp-1 spamd[17109]: result: .  1 -
HTML_60_70,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_REAL_NAME
scantime=0.2,size=16625,mid=<[EMAIL PROTECTED]>,autolearn=n
o
Oct 27 09:43:43 smtp-1 spamd[13263]: connection from localhost [127.0.0.1]
at port 57246
Oct 27 09:43:43 smtp-1 spamd[13263]: spamd: handle_user unable to find user:
'*'
Oct 27 09:43:43 smtp-1 spamd[13263]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.

"bad" system:

Oct 27 09:18:12 smtp-4 spamd[12308]: checking message
<[EMAIL PROTECTED]> for *:65534.
Oct 27 09:18:13 smtp-4 spamd[12057]: clean message (-1.0/5.0) for *:65534 in
5.2 seconds, 10639 bytes.
Oct 27 09:18:13 smtp-4 spamd[12057]: result: . -1 -
ALL_TRUSTED,IP_LINK_PLUS,NORMAL_HTTP_TO_IP,RAZOR2_CF_RANGE_51_100,RAZOR2_CHE
CK,TW_JT
scantime=5.2,size=10639,mid=<[EMAIL PROTECTED]>,autolearn=no
Oct 27 09:18:13 smtp-4 spamd[12057]: connection from localhost [127.0.0.1]
at port 60312
Oct 27 09:18:13 smtp-4 spamd[12057]: spamd: handle_user unable to find user:
'*'
Oct 27 09:18:13 smtp-4 spamd[12057]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.

any ideas?

both machines are identical (config (exim4,clamav,spamassasin) and
hardware). It's a debian sarge up to date system...

Regards,

Frank van den Diepstraten



Re: spamd scan problem

2006-10-27 Thread Peter Teunissen


On 27-okt-2006, at 11:40, Frank van den Diepstraten wrote:

ok I understand that, but I wan't to know if this causes the  
problem. So I
want to trie it out without that razor thing... But I can't find  
the config

where it's enabled in.



Hi Frank,


To disable razor, add the following to your local.cf:

use_razor2  0

Peter


-Oorspronkelijk bericht-
Van: John Andersen [mailto:[EMAIL PROTECTED]
Verzonden: vrijdag 27 oktober 2006 11:36
Aan: users@spamassassin.apache.org
Onderwerp: Re: FW: spamd scan problem


On Friday 27 October 2006 01:32, Frank van den Diepstraten wrote:

But now the question is where I can
disable this razor thing...


No no, you want to ENABLE it on the "good" system.

Razor is wounderfull.  It just takes a little bit of time, but not
a great deal of CPU load.

Razor catches a lot of spam with almost a non-existant
false positive rate.

--
_
John Andersen





Re: FW: spamd scan problem

2006-10-27 Thread John Andersen
On Friday 27 October 2006 00:48, Frank van den Diepstraten wrote:
> (sorry for duplicate mails)
>
> Hi all,
>
> I've got a question about spamassasin. I've got 2 mailservers with an
> identical installation. 

> HTML_60_70,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_REAL_NAME
> scantime=0.2, 

> ALL_TRUSTED,IP_LINK_PLUS,NORMAL_HTTP_TO_IP,RAZOR2_CF_RANGE_51_100,RAZOR2_CH
>E CK,TW_JT
> scantime=5.2

Do you run razor on the first system?  Or any other network
tests?  If not, that alone may be the answer.

Now it could just be that your examples came out with no 
razor in the first one, but I gotta ask.


-- 
_
John Andersen


RE: FW: spamd scan problem

2006-10-27 Thread Frank van den Diepstraten
Thnx for your response. I think thats the problem because when a grep for
RAZOR in de "bad" systems mail.log I get full pages. When I do the same on
the "good" system there's no output. But now the question is where I can
disable this razor thing...

Regards,

Frank.

-Oorspronkelijk bericht-
Van: John Andersen [mailto:[EMAIL PROTECTED]
Verzonden: vrijdag 27 oktober 2006 11:08
Aan: users@spamassassin.apache.org
Onderwerp: Re: FW: spamd scan problem


On Friday 27 October 2006 00:48, Frank van den Diepstraten wrote:
> (sorry for duplicate mails)
>
> Hi all,
>
> I've got a question about spamassasin. I've got 2 mailservers with an
> identical installation.

> HTML_60_70,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_REAL_NAME
> scantime=0.2,

>
ALL_TRUSTED,IP_LINK_PLUS,NORMAL_HTTP_TO_IP,RAZOR2_CF_RANGE_51_100,RAZOR2_CH
>E CK,TW_JT
> scantime=5.2

Do you run razor on the first system?  Or any other network
tests?  If not, that alone may be the answer.

Now it could just be that your examples came out with no
razor in the first one, but I gotta ask.


--
_
John Andersen



Re: FW: spamd scan problem

2006-10-27 Thread John Andersen
On Friday 27 October 2006 01:32, Frank van den Diepstraten wrote:
> But now the question is where I can
> disable this razor thing...

No no, you want to ENABLE it on the "good" system.

Razor is wounderfull.  It just takes a little bit of time, but not
a great deal of CPU load.  

Razor catches a lot of spam with almost a non-existant
false positive rate.  

-- 
_
John Andersen


pgpHCdeXG99O7.pgp
Description: PGP signature


RE: FW: spamd scan problem

2006-10-27 Thread Frank van den Diepstraten
ok I understand that, but I wan't to know if this causes the problem. So I
want to trie it out without that razor thing... But I can't find the config
where it's enabled in.

Regards,

Frank.

-Oorspronkelijk bericht-
Van: John Andersen [mailto:[EMAIL PROTECTED]
Verzonden: vrijdag 27 oktober 2006 11:36
Aan: users@spamassassin.apache.org
Onderwerp: Re: FW: spamd scan problem


On Friday 27 October 2006 01:32, Frank van den Diepstraten wrote:
> But now the question is where I can
> disable this razor thing...

No no, you want to ENABLE it on the "good" system.

Razor is wounderfull.  It just takes a little bit of time, but not
a great deal of CPU load.

Razor catches a lot of spam with almost a non-existant
false positive rate.

--
_
John Andersen