Am 05.07.2016 um 14:01 schrieb Reindl Harald:
i have here a message with URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist 50% of all tries against spamd it does NOT hit while the scantime for the whole message is arounnd 3 seconds - since there is a local unbound-cache with cache-min-ttl: 300 cache-max-ttl: 10800 it's impossible that there are happening dns timeouts and i can observe the same behavior randomly with URIBL_LOCAL where the unbound dns cache on 127.0.0.1:53 talks to rblsdnsd on 127.0.0.1:1053 that smells why ever very unrelieable and frankly i observed similar with SPF_PASS / SHORTCIRCUIT where people within 5 seconds get the same message and one get USER_IN_SPF_WHITELIST while the other goes through all tests
that below too MUST NOT happen because one triggers USER_IN_SPF_WHITELIST and the other don't have any SPF test and given that there is a python-policyd-spf waiting 20 seconds for the response in 'smtpd_recipient_restrictions' long before the contentfilters the dns-results are cached
Jul 4 11:34:51 mail-gw postfix/smtpd[13648]: 3rjhgb71LVzB47: client=o3.email.wetransfer.com[192.254.123.42] Jul 4 11:34:52 mail-gw spamd[12535]: spamd: processing message <577a2da06a20d_63ca5ed30013218...@delayedjobs-17aj6hbldm9spghikobe88v7k.wetransfer.com.mail> for sa-milt:189 Jul 4 11:34:56 mail-gw spamd[12535]: spamd: result: . -4 - BAYES_00,CUST_DNSWL_2_SENDERSC_L,CUST_DNSWL_3_JEF_L,CUST_DNSWL_5_ORG_N,CUST_DNSWL_8_TL_N,DKIM_SIGNED,DKIM_VALID,HTML_MESSAGE,RCVD_IN_MSPIKE_H2,RP_MATCHES_RCVD scantime=4.2,size=18438,user=sa-milt,uid=189,required_score=5.5,rhost=localhost,raddr=127.0.0.1,rport=/run/spamassassin/spamassassin.sock,mid=<577a2da06a20d_63ca5ed30013218...@delayedjobs-17aj6hbldm9spghikobe88v7k.wetransfer.com.mail>,bayes=0.000000,autolearn=disabled,shortcircuit=no
Jul 4 11:57:01 mail-gw postfix/smtpd[14837]: 3rjj993Bk8zB7P: client=o3.email.wetransfer.com[192.254.123.42] Jul 4 11:57:02 mail-gw spamd[14302]: spamd: processing message <577a32e8f35bb_671c116b30813485...@delayedjobs-16gux7nsdp9xgp69boio5hcsg.wetransfer.com.mail> for sa-milt:189 Jul 4 11:57:02 mail-gw spamd[14302]: spamd: result: . -100 - CUST_DNSWL_2_SENDERSC_L,CUST_DNSWL_3_JEF_L,CUST_DNSWL_5_ORG_N,CUST_DNSWL_8_TL_N,CUST_SHORTCIRCUIT,RCVD_IN_MSPIKE_H2,SHORTCIRCUIT,USER_IN_SPF_WHITELIST scantime=0.1,size=15685,user=sa-milt,uid=189,required_score=5.5,rhost=localhost,raddr=127.0.0.1,rport=/run/spamassassin/spamassassin.sock,mid=<577a32e8f35bb_671c116b30813485...@delayedjobs-16gux7nsdp9xgp69boio5hcsg.wetransfer.com.mail>,autolearn=disabled,shortcircuit=spam
signature.asc
Description: OpenPGP digital signature
