Lots of SpamAssassin timeouts today

[Jacobs, Eric (ThomasTech)]

> 
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Stephen Swaney
> Sent: Tuesday, November 22, 2005 11:48 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: Lots of SpamAssassin timeouts today
> 
> > -----Original Message-----
> > From: MailScanner mailing list 
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> > Behalf Of Michele Neylon:: Blacknight.ie
> > Sent: Tuesday, November 22, 2005 2:41 PM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: Lots of SpamAssassin timeouts today
> > 
> > Jason Williams wrote:
> > > Not sure if anything is going on, but I've noticed today 
> that I have
> > > been seeing a lot of SpamAssassin timeouts on my server today:
> > >
> > 
> > It's usually DNS related or can be resolved with increasing the
> timeout.
> > I think it's covered in the wiki / maq somewhere
> > 
> > --
> > Mr Michele Neylon
> >
> >Probably not related but there is a LOT of virus activity today. One
> client
> >reports:
> >
> >	Processed:	25,082	1.2Gb
> >	Clean:	8,937		35.6%
> >	Viruses:	12,945	51.6%
> >
> >High load can also cause SpamAssassin timeouts.
> >
> >Steve
> 
> Can DNS timeouts cause a higher load on the server than normal?
> 
> I've noticed a little bit higher load average than normal on 
> the server
> today?
> 
> I think a new virus came out yesterday or today. I see a lot 
> of rejects
> from cia.gov with a .exe. ClamAV picks it up as mytop of some sort.
> 
> Thanks,
> 
> Jason
> 
> ------------------------ MailScanner list ------------------------

I'm getting hit with a lot of theses viruses (Clamav sees them as SOBER.U).
What might be upping the CPU load is that spamassassin is also seeing them
as SPAM. (And, of course, in my case, I've set up sendmail to split multiple
recipients into separate e-mails, thus multiplying the load manyfold since
these viruses have many, many recipients in each message)

Eric Jacobs
Thomas Technology Solutions, Inc.
One Progress Dr
Horsham, PA 19044
215-682-5354
eric.jacobs at thomastechsolutions.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!