Some Messages Double Scanned

Julian Field MailScanner at ecs.soton.ac.uk
Thu Jan 12 16:28:29 GMT 2006


    [ The following text is in the "WINDOWS-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

A couple of (okay, 3) points.
If you decide to scrap the Bayes db, then you can get a good "starter"
database from www.fsl.com/support.

4.50 has fixed problems with MailScanner doing the expiry run itself. So
you can just let MailScanner handle the job for you.

I would add a delay after the "service MailScanner stop" for, say, 30 to
60 seconds to give it time to shutdown as it may have locks on the file
still in use when it runs the sa-learn.

On 12 Jan 2006, at 15:39, chardlist wrote:

      Some more information.  It seems like the bayes rule checks
      are what is causing the problem.

       

      I have had a cron job that runs every week to execute the
      following commands to rebuild the bayes files and clear out
      old tokens.

       

      service MailScanner stop

      then...

      /usr/bin/sa-learn -C
      /usr/mailscanner/etc/spam.assassin.prefs.conf --force-expire

      then...

      chown mailnull:nobody /usr/mailscanner/bayes/bayes_*

      and finally...

      service MailScanner start

       

      The commands above are all executing just fine, but what
      I^Òve noticed is that the bayes_seen file does not reduce in
      size as it normally has done.  The bayes_toks file does get
      smaller as I would expect and has grown to 42MB.

       

      What^Òs the best way to proceed from here?  Should I can the
      bayes files and have it start rebuilding from scratch, or is
      there a way to get them all working again?

       

      Thanks,

      -Brendan

       

       

       

      -----Original Message-----
      From: MailScanner mailing list
      [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of chardlist
      Sent: Thursday, January 12, 2006 5:30 AM
      To: MAILSCANNER at JISCMAIL.AC.UK
      Subject: Some Messages Double Scanned

       

      I'm noticing that some messages are getting double-scanned by
      MailScanner.

      Any thoughts on this?  Here are headers from a sample
      message.

       

      X-ChardNet-MailScanner-SpamCheck: not spam, SpamAssassin
      (score=3.593,

            required 5, DATE_IN_FUTURE_03_06 0.07, HTML_50_60 0.10,

            HTML_MESSAGE 0.00, MIME_HTML_MOSTLY 0.28,
      MPART_ALT_DIFF 1.50,

            RAZOR2_CF_RANGE_51_100 1.49, RAZOR2_CHECK 0.15), not
      spam,

      SpamAssassin (score=3.199,

            required 5, BAYES_50 0.00, DATE_IN_FUTURE_03_06 1.96,

            HTML_50_60 0.13, HTML_MESSAGE 0.00, MIME_HTML_MOSTLY
      1.10)

      X-ChardNet-MailScanner-SpamScore: 3, 3

       

       

      I'm running MailScanner 4.47.4 on Redhat 9 with Exim 4.52

       

       

      Thanks for any assistance,

       

      -Brendan


-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/)
and the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!


    [ Part 2, Application/PGP-SIGNATURE  498bytes. ]
    [ Unable to print this part. ]




More information about the MailScanner mailing list