What is going on? Totally bizzare

[Dave]

Ok here ya go, I placed another 2 emails in the pop so I could grab a fresh
mail log.
Hope this is enough, and just to let you know. Almost 1 hr after I sent
those 2 messages, I 
have yet to see anything in the inbox.(Load btw is at 3 right now)



Sep 22 13:13:56 gateway fetchmail[3923]: 2 messages for
spammenow1 at rogers.com at pop1.rog.mail.vip.re2.yahoo.com (54513 octets).
Sep 22 13:13:56 gateway fetchmail[3923]: reading message
spammenow1 at rogers.com@pop1.rog.mail.vip.re2.yahoo.com:1 of 2 (47034 octets)
Sep 22 13:14:04 gateway postfix/smtpd[8253]: connect from
localhost.localdomain[127.0.0.1]
Sep 22 13:14:06 gateway postfix/smtpd[8253]: 5997C20310:
client=localhost.localdomain[127.0.0.1]
Sep 22 13:14:07 gateway postfix/cleanup[8257]: 5997C20310:
message-id=<20040213175335.21997.qmail at nl-web4.internet.com>
Sep 22 13:14:07 gateway fetchmail[3923]:  flushed
Sep 22 13:14:07 gateway fetchmail[3923]: reading message
spammenow1 at rogers.com@pop1.rog.mail.vip.re2.yahoo.com:2 of 2 (7479 octets)
Sep 22 13:14:07 gateway postfix/smtpd[8253]: 8912320311:
client=localhost.localdomain[127.0.0.1]
Sep 22 13:14:07 gateway postfix/cleanup[8257]: 8912320311:
message-id=<200402130702.XAA32921 at f.ss01.net>
Sep 22 13:14:07 gateway fetchmail[3923]:  flushed
Sep 22 13:14:07 gateway postfix/smtpd[8253]: disconnect from
localhost.localdomain[127.0.0.1]
Sep 22 13:14:07 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:14:07 PM EDT
Sep 22 13:14:11 gateway postfix/nqmgr[8175]: 8912320311:
from=<b.InboxMail.0-2e6b4ba-4f23.homereach.com.-spiro at f.ss01.net>,
size=7774, nrcpt=1 (queue active)
Sep 22 13:14:12 gateway postfix/nqmgr[8175]: 8912320311:
to=<spammenow at localhost.taate.ca>, relay=none, delay=4, status=deferred
(deferred transport)
Sep 22 13:14:14 gateway postfix/nqmgr[8175]: 5997C20310:
from=<newsletter at nl.internet.com>, size=47436, nrcpt=1 (queue active)
Sep 22 13:14:16 gateway postfix/nqmgr[8175]: 5997C20310:
to=<spammenow at localhost.taate.ca>, relay=none, delay=8, status=deferred
(deferred transport)

*** At this point the load is at about 5.5(uptime)


Sep 22 13:18:21 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:18:21 PM EDT
Sep 22 13:19:21 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:19:21 PM EDT
Sep 22 13:19:57 gateway MailScanner[8252]: Using locktype = flock
Sep 22 13:20:02 gateway MailScanner[8252]: New Batch: Scanning 4 messages,
66809 bytes
Sep 22 13:22:27 gateway ipop3d[8355]: pop3 service init from 192.168.1.118
Sep 22 13:22:28 gateway ipop3d[8355]: Auth user=spammenow
host=[192.168.1.118] nmsgs=0/0
Sep 22 13:22:28 gateway ipop3d[8355]: Logout user=spammenow
host=[192.168.1.118] nmsgs=0 ndele=0
Sep 22 13:22:33 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:22:33 PM EDT
Sep 22 13:23:10 gateway MailScanner[8252]: SpamAssassin timed out and was
killed, failure 1 of 20
Sep 22 13:23:33 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:23:33 PM EDT
Sep 22 13:26:16 gateway MailScanner[8252]: SpamAssassin timed out and was
killed, failure 2 of 20
Sep 22 13:26:47 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:26:47 PM EDT
Sep 22 13:27:48 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:27:48 PM EDT
Sep 22 13:29:21 gateway MailScanner[8252]: SpamAssassin timed out and was
killed, failure 3 of 20
Sep 22 13:29:33 gateway postfix/nqmgr[8228]: DAF0A20314: from=<>, size=1220,
nrcpt=1 (queue active)
Sep 22 13:29:35 gateway postfix/nqmgr[8228]: 2CFE4202DF: from=<>, size=1220,
nrcpt=1 (queue active)
Sep 22 13:31:02 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:31:02 PM EDT
Sep 22 13:32:02 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:32:02 PM EDT
Sep 22 13:32:26 gateway ipop3d[8413]: pop3 service init from 192.168.1.118
Sep 22 13:32:27 gateway ipop3d[8413]: Auth user=spammenow
host=[192.168.1.118] nmsgs=0/0
Sep 22 13:32:27 gateway ipop3d[8413]: Logout user=spammenow
host=[192.168.1.118] nmsgs=0 ndele=0
Sep 22 13:32:32 gateway MailScanner[8252]: SpamAssassin timed out and was
killed, failure 4 of 20
Sep 22 13:32:44 gateway postfix/smtp[8389]: connect to
s0.tekmailer.com[69.6.7.177]: Connection timed out (port 25)
Sep 22 13:32:44 gateway postfix/smtp[8388]: connect to
s0.tekmailer.com[69.6.7.177]: Connection timed out (port 25)
Sep 22 13:32:44 gateway postfix/smtp[8389]: 2CFE4202DF:
to=<b.christina.0-2c63320-2739.homereach.com.-spiro at s0.tekmailer.com>,
 relay=none, delay=9229, status=deferred (connect to
s0.tekmailer.com[69.6.7.177]: Connection timed out)
Sep 22 13:32:44 gateway postfix/smtp[8388]: DAF0A20314:
to=<b.christina.0-2c63320-2739.homereach.com.-spiro at s0.tekmailer.com>,
 relay=none, delay=9229, status=deferred (connect to
s0.tekmailer.com[69.6.7.177]: Connection timed out)
Sep 22 13:32:55 gateway MailScanner[8252]: Virus and Content Scanning:
Starting
Sep 22 13:32:55 gateway MailScanner[8252]: Virus and Content Scanning:
Starting
Sep 22 13:35:15 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:35:15 PM EDT
Sep 22 13:36:15 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:36:15 PM EDT
Sep 22 13:37:58 gateway MailScanner[8252]: Commercial scanner clamavmodule
timed out!
Sep 22 13:37:58 gateway MailScanner[8252]: Virus Scanning: Denial Of Service
attack detected!
Sep 22 13:38:23 gateway MailScanner[8250]: Using locktype = flock
Sep 22 13:39:29 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:39:29 PM EDT
Sep 22 13:40:29 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:40:29 PM EDT
Sep 22 13:42:28 gateway ipop3d[8471]: pop3 service init from 192.168.1.118
Sep 22 13:42:28 gateway ipop3d[8471]: Auth user=spammenow
host=[192.168.1.118] nmsgs=0/0
Sep 22 13:42:28 gateway ipop3d[8471]: Logout user=spammenow
host=[192.168.1.118] nmsgs=0 ndele=0
Sep 22 13:43:02 gateway MailScanner[8252]: Commercial scanner clamavmodule
timed out!
Sep 22 13:43:03 gateway MailScanner[8252]: Virus Scanning: Denial Of Service
attack is in message 5997C20310
Sep 22 13:43:42 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:43:42 PM EDT
Sep 22 13:44:14 gateway MailScanner[8249]: Using locktype = flock
Sep 22 13:44:42 gateway fetchmail[3923]: awakened at Wed 22 Sep 2004
01:44:42 PM EDT
Sep 22 13:46:07 gateway postfix/nqmgr[8175]: 8912320311: skipped, still
being delivered
Sep 22 13:46:07 gateway postfix/nqmgr[8175]: 5997C20310: skipped, still
being delivered
Sep 22 13:47:48 gateway postfix/nqmgr[8175]: 8912320311: skipped, still
being delivered
Sep 22 13:47:48 gateway postfix/nqmgr[8175]: 5997C20310: skipped, still
being delivered
Sep 22 13:47:54 gateway fetchmail[3923]: 1 message for spammenow1 at rogers.com
at pop1.rog.mail.vip.re2.yahoo.com (1846 octets).

Sep 22 13:47:54 gateway fetchmail[3923]: reading message
spammenow1 at rogers.com@pop1.rog.mail.vip.re2.yahoo.com:1 of 1 (1846 oc
tets)
Sep 22 13:47:55 gateway postfix/smtpd[8500]: connect from
localhost.localdomain[127.0.0.1]
Sep 22 13:47:56 gateway postfix/smtpd[8500]: 385DA20312:
client=localhost.localdomain[127.0.0.1]
Sep 22 13:47:56 gateway postfix/cleanup[8501]: 385DA20312:
message-id=<20040922174756.385DA20312 at mail.taate.ca>
Sep 22 13:47:56 gateway fetchmail[3923]:  flushed
Sep 22 13:47:56 gateway fetchmail[3923]: sleeping at Wed 22 Sep 2004
01:47:56 PM EDT
Sep 22 13:47:56 gateway postfix/smtpd[8500]: disconnect from
localhost.localdomain[127.0.0.1]
Sep 22 13:47:56 gateway postfix/nqmgr[8175]: 385DA20312:
from=<cappedkunfs at image.net>, size=2233, nrcpt=1 (queue active)
Sep 22 13:47:56 gateway postfix/nqmgr[8175]: 385DA20312:
to=<spammenow at localhost.taate.ca>, relay=none, delay=0, status=deferr
ed (deferred transport)
Sep 22 13:48:06 gateway MailScanner[8250]: New Batch: Found 3 messages
waiting





-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Michele Neylon:: Blacknight Solutions
Sent: Wednesday, September 22, 2004 12:32 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: What is going on? Totally bizzare


> I'm in the process of setting up a box with MS. I think I have 
> everything set correctly and it's filtering emails, BUT it seems to 
> work 100% when I'm in debug mode!!
>
> The system is a 700Mhz with almost 400 megs memory.
> I am currently testing it with fetchmail.(Long story), but it works 
> fine.
>
> So when I run MS with debug set to YES(also SA debug on), the system 
> load is under 2(using uptime/top), I placed 150 spam messages into the 
> pop account I'm fetching mail from.(I have a pop account with over 
> 1000 spam emails). MS starts to process the messages about 30 at a 
> time, I keep reloading the MS service and it continues to process the 
> emails. All is well...
>
> So I figure everything is working fine, turn off the debug and reload 
> MS. NOW the load on the system is up to 5+
> nothing in the logs to show it's processing anything.
> And if something does show up on the logs, it's timeout
> messages either from SA or RBL's
>
> Am I doing something stupid? OR am I missing something here?
What are you getting in your mail logs when you turn off debugging?

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
mailscanner' in the body of the email. Before posting, read the MAQ
(http://www.mailscanner.biz/maq/) and the archives
(http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).