MailScanner[31525]: SpamAssassin timed out and was killed, co nsecutive failure 1 of 20

Julian Field mailscanner at ecs.soton.ac.uk
Thu May 27 20:38:11 IST 2004 

At 20:29 27/05/2004, you wrote:
>Why did I get a time out on this message? I admit SA was having problems
>when this email got delivered, but
>I looked for the 20 consecutive failures but never got over 5, and yet SA
>still timed out on this message.  Does MS just not wait for SA to get
>through 20 falures before it writes SA off and just says that it times out?

If it never got over 5, then it hasn't had the 20 failures in a row that
your version requires before giving up on all the network checks that SA
does. If you have a modern version, check for the existence of the option
         SpamAssassin Timeouts History
Using this, combined with the normal timeout counter, you can make it give
up on all the SA network checks of, for example, 10 out of the last 20
checks time out. This means that a consistent 50% failure rate will trigger
the "give up" action, rather than the old behaviour which would have
required n consecutive failures before doing anything.

There is a corresponding
         Spam List Timeouts History
option for the RBLs too.

>Microsoft Mail Internet Headers Version 2.0
>Received: from webmail.rdu.com ([172.16.50.2]) by RDUNTS02.rdu.com with
>Microsoft SMTPSVC(5.0.2195.6713);
>   Wed, 26 May 2004 09:21:41 -0400
>Received: from dsl-201-129-208-159.prod-infinitum.com.mx
>(dsl-201-129-208-159.prod-infinitum.com.mx [201.129.208.159] (may be forged))
>  by webmail.rdu.com (8.11.6/8.11.6) with SMTP id i4QDJSN11126
>  for <<mailto:gina.odom at rdu.com>gina.odom at rdu.com>; Wed, 26 May 2004
> 09:20:02 -0400
>Received: from [73.154.192.253] by
>dsl-201-129-208-159.prod-infinitum.com.mx with ESMTP id 6C1725FEDDD; Wed,
>26 May 2004 09:22:16 -0500
>Message-ID:
><<mailto:iao12iuj96h$l$31y5m6jjr at 58v2jl>iao12iuj96h$l$31y5m6jjr at 58v2jl>
>From: "Rebekah Herring"
><<mailto:samaragashz at compusenior.com>samaragashz at compusenior.com>
>Reply-To: "Rebekah Herring"
><<mailto:samaragashz at compusenior.com>samaragashz at compusenior.com>
>To: <mailto:gina.odom at rdu.com>gina.odom at rdu.com
>Subject: Toronto Pharmacy Prescription Drugs ujdtm rw  lskj i
>Date: Wed, 26 May 04 09:22:16 GMT
>X-Mailer: eGroups Message Poster
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>  boundary="DD_9_B._BE_EB4.B"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-RDU-MailScanner-Information: Please contact the ISP for more information
>X-RDU-MailScanner: Found to be clean
>X-RDU-MailScanner-SpamCheck: not spam, SpamAssassin (timed out)
>Return-Path: <mailto:samaragashz at compusenior.com>samaragashz at compusenior.com
>X-OriginalArrivalTime: 26 May 2004 13:21:41.0721 (UTC)
>FILETIME=[621DA490:01C44324]
>
>--DD_9_B._BE_EB4.B
>Content-Type: text/html;
>Content-Transfer-Encoding: quoted-printable
>
>
>--DD_9_B._BE_EB4.B--
>----------------------------------------------------------------------------------
>
>cat /var/log/maillog | grep "May 26" | grep SpamAssassin
>
>May 26 09:18:25 webmail MailScanner[2763]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:18:51 webmail MailScanner[2798]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:20:40 webmail MailScanner[2798]: SpamAssassin timed out and was
>killed, consecutive failure 2 of 20
>May 26 09:21:06 webmail MailScanner[2560]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:21:07 webmail MailScanner[2446]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:21:11 webmail MailScanner[2742]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:21:36 webmail MailScanner[2763]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:21:47 webmail MailScanner[2798]: SpamAssassin timed out and was
>killed, consecutive failure 3 of 20
>May 26 09:22:23 webmail MailScanner[2446]: SpamAssassin timed out and was
>killed, consecutive failure 2 of 20
>May 26 09:22:42 webmail MailScanner[2742]: SpamAssassin timed out and was
>killed, consecutive failure 2 of 20
>May 26 09:22:55 webmail MailScanner[2763]: SpamAssassin timed out and was
>killed, consecutive failure 2 of 20
>May 26 09:23:05 webmail MailScanner[2798]: SpamAssassin timed out and was
>killed, consecutive failure 4 of 20
>May 26 09:23:06 webmail MailScanner[2560]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>May 26 09:23:24 webmail MailScanner[2446]: SpamAssassin timed out and was
>killed, consecutive failure 3 of 20
>May 26 09:24:06 webmail MailScanner[2798]: SpamAssassin timed out and was
>killed, consecutive failure 5 of 20
>May 26 09:24:17 webmail MailScanner[2742]: SpamAssassin timed out and was
>killed, consecutive failure 3 of 20
>May 26 09:24:42 webmail MailScanner[2763]: SpamAssassin timed out and was
>killed, consecutive failure 3 of 20
>May 26 09:25:42 webmail MailScanner[2763]: SpamAssassin timed out and was
>killed, consecutive failure 4 of 20
>
>
>
>-----Original Message-----
>From: Kevin Miller [mailto:Kevin_Miller at CI.JUNEAU.AK.US]
>Sent: Thursday, May 27, 2004 2:22 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: [MAILSCANNER] MailScanner[31525]: SpamAssassin timed out and
>was killed, co nsecutive failure 1 of 20
>
>If the network is slow, or any RBLs that spamassassin is using are
>congested, or probably a half dozen other reasons you'll get the
>occaisional time out.  The phrase "1 of 20" is the key.  In other words,
>it will try 20 times before giving up.  If you see a series of those going
>up to "20 of 20" you have a problem.  If it's just the odd timeout here
>and there it's the email equivilant of hitting a slow web page.  I think...
>
>
>...Kevin
>--
>Kevin Miller                Registered Linux User No: 307357
>CBJ MIS Dept.               Network Systems Administrator, Mail Administrator
>155 South Seward Street     ph: (907) 586-0242
>Juneau, Alaska 99801        fax: (907 586-4500
>
>-----Original Message-----
>From: Idan Plotnik [mailto:idan at SECURENET.CO.IL]
>Sent: Wednesday, May 26, 2004 11:50 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: MailScanner[31525]: SpamAssassin timed out and was killed,
>consecutive failure 1 of 20
>
>But I don't use Razor's servers!
>
>
>
>
>
>Regards,
>
>Idan Plotnik
>SecureNet Ltd, Israel
>E-Mail: idan at securenet.co.il
>Office: +972-03-7544626
>Mobile: +972-54-4542215
>We Certify Secured Networks
>
>----------
>From: Casanova, Chase [mailto:Chase.Casanova at RDU.COM]
>Sent: Wednesday, May 26, 2004 10:53 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: MailScanner[31525]: SpamAssassin timed out and was killed,
>consecutive failure 1 of 20
>
>
>
>I've been getting several of these lately too.  Do you happen to be using
>Razor with SpamAssassin?  I think Razor's servers are getting congested at
>certain times of the day and causing the SpamAssassin calls from
>MailScanner to time out.  I'm not sure if there is a way to tell
>SpamAssassin to let Razor timeout and continue with other checks.
>
>
>
>Thanks,
>
>Chase
>
>
>
>-----Original Message-----
>From: Idan Plotnik [mailto:idan at SECURENET.CO.IL]
>Sent: Wednesday, May 26, 2004 1:40 PM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: [MAILSCANNER] MailScanner[31525]: SpamAssassin timed out and was
>killed, consecutive failure 1 of 20
>
>Hi All,
>
>
>
>Someone can tell me the reason for this error that appear in my maillog?
>
>
>
>"MailScanner[31525]: SpamAssassin timed out and was killed, consecutive
>failure 1 of 20"
>
>
>
>I read about this and I found out the it can be a DNS problem but not In
>my case.
>
>I think that because of this problem a lot of spam is getting into my
>organization.
>
>
>
>Thanks a lot.
>
>
>
>-------------------------- MailScanner list ----------------------
>To leave, send leave mailscanner to
><mailto:jiscmail at jiscmail.ac.uk>jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
><http://www.mailscanner.biz/maq/>http://www.mailscanner.biz/maq/ and the
>archives at
><http://www.jiscmail.ac.uk/lists/mailscanner.html>http://www.jiscmail.ac.uk/lists/mailscanner.html
>
>-------------------------- MailScanner list ----------------------
>To leave, send leave mailscanner to
><mailto:jiscmail at jiscmail.ac.uk>jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
><http://www.mailscanner.biz/maq/>http://www.mailscanner.biz/maq/ and the
>archives at
><http://www.jiscmail.ac.uk/lists/mailscanner.html>http://www.jiscmail.ac.uk/lists/mailscanner.html
>-------------------------- MailScanner list ----------------------
>To leave, send leave mailscanner to
><mailto:jiscmail at jiscmail.ac.uk>jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
><http://www.mailscanner.biz/maq/>http://www.mailscanner.biz/maq/ and the
>archives at
><http://www.jiscmail.ac.uk/lists/mailscanner.html>http://www.jiscmail.ac.uk/lists/mailscanner.html
>
>-------------------------- MailScanner list ----------------------
>To leave, send leave mailscanner to
><mailto:jiscmail at jiscmail.ac.uk>jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
><http://www.mailscanner.biz/maq/>http://www.mailscanner.biz/maq/ and the
>archives at
><http://www.jiscmail.ac.uk/lists/mailscanner.html>http://www.jiscmail.ac.uk/lists/mailscanner.html
>
>-------------------------- MailScanner list ----------------------
>To leave, send leave mailscanner to
><mailto:jiscmail at jiscmail.ac.uk>jiscmail at jiscmail.ac.uk
>Before posting, please see the Most Asked Questions at
><http://www.mailscanner.biz/maq/>http://www.mailscanner.biz/maq/ and the
>archives at
><http://www.jiscmail.ac.uk/lists/mailscanner.html>http://www.jiscmail.ac.uk/lists/mailscanner.html

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20040527/91d361d5/attachment.html

More information about the MailScanner mailing list