FW: spamd scan problem
(sorry for duplicate mails) Hi all, I've got a question about spamassasin. I've got 2 mailservers with an identical installation. But 1 of the servers is a bit slow. When I searched I found the problem in the scantime. After the data command it takes about 0,6sec. to scan a message on the "good" system and about 4.0 seconds on the "bad" system. Here's an example: "good" system: Oct 27 09:43:42 smtp-1 spamd[17109]: checking message <[EMAIL PROTECTED]> for *:65534. Oct 27 09:43:42 smtp-1 spamd[17109]: clean message (1.7/5.0) for *:65534 in 0.2 seconds, 16625 bytes. Oct 27 09:43:42 smtp-1 spamd[17109]: result: . 1 - HTML_60_70,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_REAL_NAME scantime=0.2,size=16625,mid=<[EMAIL PROTECTED]>,autolearn=n o Oct 27 09:43:43 smtp-1 spamd[13263]: connection from localhost [127.0.0.1] at port 57246 Oct 27 09:43:43 smtp-1 spamd[13263]: spamd: handle_user unable to find user: '*' Oct 27 09:43:43 smtp-1 spamd[13263]: Still running as root: user not specified with -u, not found, or set to root. Fall back to nobody. "bad" system: Oct 27 09:18:12 smtp-4 spamd[12308]: checking message <[EMAIL PROTECTED]> for *:65534. Oct 27 09:18:13 smtp-4 spamd[12057]: clean message (-1.0/5.0) for *:65534 in 5.2 seconds, 10639 bytes. Oct 27 09:18:13 smtp-4 spamd[12057]: result: . -1 - ALL_TRUSTED,IP_LINK_PLUS,NORMAL_HTTP_TO_IP,RAZOR2_CF_RANGE_51_100,RAZOR2_CHE CK,TW_JT scantime=5.2,size=10639,mid=<[EMAIL PROTECTED]>,autolearn=no Oct 27 09:18:13 smtp-4 spamd[12057]: connection from localhost [127.0.0.1] at port 60312 Oct 27 09:18:13 smtp-4 spamd[12057]: spamd: handle_user unable to find user: '*' Oct 27 09:18:13 smtp-4 spamd[12057]: Still running as root: user not specified with -u, not found, or set to root. Fall back to nobody. any ideas? both machines are identical (config (exim4,clamav,spamassasin) and hardware). It's a debian sarge up to date system... Regards, Frank van den Diepstraten
Re: spamd scan problem
On 27-okt-2006, at 11:40, Frank van den Diepstraten wrote: ok I understand that, but I wan't to know if this causes the problem. So I want to trie it out without that razor thing... But I can't find the config where it's enabled in. Hi Frank, To disable razor, add the following to your local.cf: use_razor2 0 Peter -Oorspronkelijk bericht- Van: John Andersen [mailto:[EMAIL PROTECTED] Verzonden: vrijdag 27 oktober 2006 11:36 Aan: users@spamassassin.apache.org Onderwerp: Re: FW: spamd scan problem On Friday 27 October 2006 01:32, Frank van den Diepstraten wrote: But now the question is where I can disable this razor thing... No no, you want to ENABLE it on the "good" system. Razor is wounderfull. It just takes a little bit of time, but not a great deal of CPU load. Razor catches a lot of spam with almost a non-existant false positive rate. -- _ John Andersen
Re: FW: spamd scan problem
On Friday 27 October 2006 00:48, Frank van den Diepstraten wrote: > (sorry for duplicate mails) > > Hi all, > > I've got a question about spamassasin. I've got 2 mailservers with an > identical installation. > HTML_60_70,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_REAL_NAME > scantime=0.2, > ALL_TRUSTED,IP_LINK_PLUS,NORMAL_HTTP_TO_IP,RAZOR2_CF_RANGE_51_100,RAZOR2_CH >E CK,TW_JT > scantime=5.2 Do you run razor on the first system? Or any other network tests? If not, that alone may be the answer. Now it could just be that your examples came out with no razor in the first one, but I gotta ask. -- _ John Andersen
RE: FW: spamd scan problem
Thnx for your response. I think thats the problem because when a grep for RAZOR in de "bad" systems mail.log I get full pages. When I do the same on the "good" system there's no output. But now the question is where I can disable this razor thing... Regards, Frank. -Oorspronkelijk bericht- Van: John Andersen [mailto:[EMAIL PROTECTED] Verzonden: vrijdag 27 oktober 2006 11:08 Aan: users@spamassassin.apache.org Onderwerp: Re: FW: spamd scan problem On Friday 27 October 2006 00:48, Frank van den Diepstraten wrote: > (sorry for duplicate mails) > > Hi all, > > I've got a question about spamassasin. I've got 2 mailservers with an > identical installation. > HTML_60_70,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_REAL_NAME > scantime=0.2, > ALL_TRUSTED,IP_LINK_PLUS,NORMAL_HTTP_TO_IP,RAZOR2_CF_RANGE_51_100,RAZOR2_CH >E CK,TW_JT > scantime=5.2 Do you run razor on the first system? Or any other network tests? If not, that alone may be the answer. Now it could just be that your examples came out with no razor in the first one, but I gotta ask. -- _ John Andersen
Re: FW: spamd scan problem
On Friday 27 October 2006 01:32, Frank van den Diepstraten wrote: > But now the question is where I can > disable this razor thing... No no, you want to ENABLE it on the "good" system. Razor is wounderfull. It just takes a little bit of time, but not a great deal of CPU load. Razor catches a lot of spam with almost a non-existant false positive rate. -- _ John Andersen pgpHCdeXG99O7.pgp Description: PGP signature
RE: FW: spamd scan problem
ok I understand that, but I wan't to know if this causes the problem. So I want to trie it out without that razor thing... But I can't find the config where it's enabled in. Regards, Frank. -Oorspronkelijk bericht- Van: John Andersen [mailto:[EMAIL PROTECTED] Verzonden: vrijdag 27 oktober 2006 11:36 Aan: users@spamassassin.apache.org Onderwerp: Re: FW: spamd scan problem On Friday 27 October 2006 01:32, Frank van den Diepstraten wrote: > But now the question is where I can > disable this razor thing... No no, you want to ENABLE it on the "good" system. Razor is wounderfull. It just takes a little bit of time, but not a great deal of CPU load. Razor catches a lot of spam with almost a non-existant false positive rate. -- _ John Andersen