SPAM Report - Timed out

[Kevin Old]

On Tue, 7 Sep 2004 11:46:59 -0400, Steve Swaney <steve.swaney at fsl.com> wrote:
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> > Behalf Of Martin Hepworth
> > Sent: Tuesday, September 07, 2004 11:12 AM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: SPAM Report - Timed out
> >
> > Mark
> >
> >   had a couple this morning around 10.30 (BST)
> >
> > normally relates to RBL's timing out for me..
> >
> >
>
> I'm working with Mark on this problem and it appears that there were three
> problems - which always makes it a bit difficult to solve.
>
> 1. As Julian suggested there was a ruleset which contained the line:
>         To:     <IP_Address>    no
>
> 2. Running The MailWatch SpamAssassin lint test showed that
>         debug: RBL: success for 0 of 1 queries                  13.12644
>         debug: RBL: timeout for rfci-dsn after 20 seconds        0.00019
>
> So find the rule that's timing out:
>         # cd /usr/share/spamassassin
>         # grep -i rfci-dsn *
>          20_dnsbl_tests.cf:header DNS_FROM_RFCI_DSN
> eval:check_rbl_from_host('rfci-dsn', 'dsn.rfc-ignorant.org.')
>
> vi /etc/MailScanner/spam.assassin.prefs.conf to add the line:
>
>         score DNS_FROM_RFCI_DSN         0.0
>
> And reload MailScanner and:
>
>         time spamassassin -D \
>         -p /etc/MailScanner/spam.assassin.prefs.cond --lint
>
> Dropped from around 20 seconds to about 8 seconds.
>
> 3. It also looked like razor was running a bit slow so we turned off razor
> checks and time to run spamassassin --lint tests dropped to around 2
> seconds.
>
> Is anyone else seeing these same or similar problems?

Yes, I'm seeing something like that.

I'm running MailScanner version:
$Id: mailscanner,v 1.142.2.145 2004/08/01 16:34:47 jkf Exp $

I've been getting a lot of these:

Sep  9 23:20:56 s15111287 MailScanner[13385]: SpamAssassin timed out
and was killed, failure 2 of 20

I'm not sure what's killing it.  I've added the "score
DNS_FROM_RFCI_DSN 0.0" like you did above and that seemed to shorten
the response time.

I also noticed my bayes database was around 8MB so I did a
--force-expire and it brought it down to about 5MB.

On another note, I've been seeing a ton of these "did not issue
MAIL/EXPN/VRFY/ETRN during connection to MTA" messages in my maillog.

Sep  9 23:20:06 s15111287 sendmail[13734]: i8A3JunX013734:
[220.186.192.185] did not issue MAIL/EXPN/VRFY/ETRN during connection
to MTA
Sep  9 23:20:13 s15111287 sendmail[13732]: i8A3JtnX013732:
[220.174.221.2] did not issue MAIL/EXPN/VRFY/ETRN during connection to
MTA
Sep  9 23:20:13 s15111287 sendmail[13775]: i8A3KDnX013775:
[64.80.63.187] did not issue MAIL/EXPN/VRFY/ETRN during connection to
MTA

Any ideas?
--
Kevin Old
kevinold at gmail.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).