spamassassin timeouts help

Tue Mar 14 16:04:40 GMT 2006

Hi everyone, 

I would like to figure out how to prevent or minimize spamassassin
timeouts. Problem is I'm not exactly sure what causes it to time out in
the first place (if someone can explain it to me that would be great). I
have 3 MailScanner gateways running on different DMZ's, MX01, MX02, and
MX03. 

1. MX01 is used primarily for mail archiving relay to IronMountain. I
have an internal MS Exchange server, anything sent or received by any of
my users is archived to archiveaddress at ironmountain.com; It is relayed
from Exchange box to MX01 and then to IronMountain's SMTP servers. MX01
is also a backup MX listed in my public mx pool with a high weight so I
do see a lot of spammers trying to hit it. This guy processes an average
of 2500 messages a day and 1/80 mails get spamassassin timeouts on this
relay.    

2. MX02 is my outgoing (internet bound relay) as well as my primary
incoming mail server listed with the lowest weight in public DNS. This
guy processes an average of 1200 messages a day and 1/190 mails get
spamassassin timeouts on this relay. 

3. MX03 is a backup relay for internetbound and incoming and is listed
in public DNS with a higher weight that MX02 so I do see a lot of
spammers try to hit it. This guy processes only 120 messages a day and
1/10 mails get spamassassin timeouts on this relay. 

What is getting me is the low amount of messages that MX03 is receiving
but yet is having so many spamassassin timeouts. Most of the spam that
gets thru has come from MX03 and from examination of the headers I can
see that spamassassin timed out, but it does catch about 50 a day. Why
so many timeouts on this guy. I have included some log entries at the
end of this email.

On All 3 relays:

Max Spam List Timeouts = 7

Spam List Timeouts History = 10

Max SpamAssassin Timeouts = 10

SpamAssassin Timeouts History = 30

Max Custom Spam Scanner Timeouts = 10

MCP Max SpamAssassin Timeouts = 20

The only thing different on MX03 is that I am using the latest
MailScanner with the feature "Cache SpamAssassin Results = yes"    

Here are the Specs for all three relays as you can see MX02 has the best
hardware, MX03 comes in second and then MX01.

MX01 specs:

1 CPU Pentium 3, 1.4GHz, 500MB of ram 

Red Hat Enterprise Linux WS release 4 (Nahant Update 2)

Perl version 5.008005 (5.8.5)

MailScanner version 4.42.9

postfix-2.1.5-4.2.RHEL4

spamassassin-3.0.4-1_25.el4.at (using DCC)

clamav-0.87-1.2.el4.rf

MX02 specs:

Dual Xeon, 3.2GHz, 4GB of ram

Red Hat Enterprise Linux WS release 4 (Nahant Update 2)

Perl version 5.008005 (5.8.5)

MailScanner version 4.45.4

postfix-2.1.5-4.2.RHEL4

spamassassin-3.0.4-1.el4 (using DCC)

clamav-0.87-1.2.el4.rf

MX03 specs:

Dual Xeon, 2.8GHz, 2G of ram

Fedora Core release 4 (Stentz)

Perl version 5.008006 (5.8.6)

MailScanner version 4.51.4

postfix-2.2.2-2

spamassassin-3.0.4-2.fc4 (using DCC, using spamassassin cache feature)

clamav-0.88-1.fc4 (using clamavmodule)

Here are some log entries from MX03 showing the timeouts:

/var/log/maillog:Mar 12 04:17:23 MX03 MailScanner[19465]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 04:17:24 MX03 MailScanner[19465]: Message
B083647F8F.C006E from 218.18.181.156 (aostos at abt.com.tr) to mydomain.com
is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 04:20:10 MX03 MailScanner[19578]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 04:20:11 MX03 MailScanner[19578]: Message
BDC6747F8F.7787A from 59.5.144.136
(snd_pcm_hw_params_set_period_size_first at glennedward.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 09:22:06 MX03 MailScanner[19522]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 09:22:08 MX03 MailScanner[19522]: Message
90FC847F8F.4E65E from 59.37.63.81 (gustavo_woodscy at lycos.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 12:58:47 MX03 MailScanner[22385]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 12:58:48 MX03 MailScanner[22385]: Message
E7D6947F80.842A4 from 66.215.18.215 (hugh at paramed.biz) to mydomain.com
is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 13:39:04 MX03 MailScanner[19470]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 13:39:05 MX03 MailScanner[19470]: Message
C111847F83.490CD from 127.0.0.1 (root at mydomain.com) to mydomain.com is
not spam (whitelisted), SpamAssassin (timed out)

/var/log/maillog:Mar 12 13:46:23 MX03 MailScanner[23571]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 13:46:24 MX03 MailScanner[23571]: Message
5658947F85.94B60 from 68.164.134.210 (stitti at bhb.com) to mydomain.com is
not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 13:53:51 MX03 MailScanner[28831]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 13:53:53 MX03 MailScanner[28831]: Message
6731247F85.D2DA7 from 203.210.151.43 (cmzcuoniucu at hotmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 14:00:28 MX03 MailScanner[23788]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 14:00:29 MX03 MailScanner[23788]: Message
E04A347F8A.4DAC5 from 200.165.21.104 (lnpykciriii at hotmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 15:45:25 MX03 MailScanner[9593]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 15:45:26 MX03 MailScanner[9593]: Message
CC93847F88.B0E03 from 80.108.24.113 (plsnutrionists at mdgekko.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 19:09:09 MX03 MailScanner[13504]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 19:09:10 MX03 MailScanner[13504]: Message
CC63347F8F.EEFAC from 200.113.75.224 (jvyxcjyidqa at hotmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 21:07:08 MX03 MailScanner[25699]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 21:07:09 MX03 MailScanner[25699]: Message
7D7F647F94.91C50 from 58.168.170.253 (i_golodnikov at inbox.ru) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 21:07:15 MX03 MailScanner[12264]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 21:07:16 MX03 MailScanner[12264]: Message
619A447F9A.40F2D from 58.168.170.253 (donoghue.laginaqa4 at gmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 12 21:15:18 MX03 MailScanner[20260]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 12 21:15:19 MX03 MailScanner[20260]: Message
8C0BF47F8F.33EA1 from 222.109.255.235 (info at mydomain.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 04:03:31 MX03 MailScanner[15384]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 04:03:32 MX03 MailScanner[15384]: Message
852C947F8F.2A2E0 from 127.0.0.1 (root at mydomain.com) to
MX03.mydomain.com,root is not spam (whitelisted), SpamAssassin (timed
out)

/var/log/maillog:Mar 13 04:36:53 MX03 MailScanner[19666]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 04:36:54 MX03 MailScanner[19666]: Message
782C047F8F.16EAF from 222.67.132.244 (xaviert at methodistemail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 04:37:33 MX03 MailScanner[13163]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 04:37:35 MX03 MailScanner[13163]: Message
D990D47F95.A54A4 from 83.35.242.23 (wzjgjztcpeo at hotmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 08:38:49 MX03 MailScanner[15435]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 08:38:50 MX03 MailScanner[15435]: Message
5715F47F8F.6E0A8 from 218.13.88.109 (carls2 at yahoo.com) to mydomain.com
is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 09:09:20 MX03 MailScanner[15142]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 09:09:21 MX03 MailScanner[15142]: Message
6F64047F8F.ACCA1 from 84.72.68.253 (john at eu-vest.biz) to mydomain.com is
not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 09:59:44 MX03 MailScanner[15689]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 09:59:45 MX03 MailScanner[15689]: Message
8704F47F8E.4A095 from 221.158.30.189 (sherrietomlinsonnm at visuallink.com)
to mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 10:19:36 MX03 MailScanner[29901]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 10:19:38 MX03 MailScanner[29901]: Message
D6DF047F8E.86E7D from 216.222.251.75 (danosusu at hearngroup.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 10:30:43 MX03 MailScanner[29902]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 10:30:44 MX03 MailScanner[29902]: Message
4902E47F8E.39042 from 82.246.244.31
(toiubpvcbdttm at math-info.univ-paris5.fr) to mydomain.com is not spam,
SpamAssassin (timed out)

/var/log/maillog:Mar 13 16:56:59 MX03 MailScanner[31306]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 16:57:01 MX03 MailScanner[31306]: Message
BE6C947F8F.4CBDE from 70.92.73.132 (richard at guitarra.biz) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 18:26:02 MX03 MailScanner[31312]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 18:26:04 MX03 MailScanner[31312]: Message
4D6BF47F6E.8DA38 from 69.143.26.250 (henry at pradella.biz) to mydomain.com
is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 13 18:27:43 MX03 MailScanner[31263]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 13 18:27:44 MX03 MailScanner[31263]: Message
EF85B47F97.9CD6C from 24.0.25.137 (john at pistonheads.biz) to mydomain.com
is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 14 01:57:42 MX03 MailScanner[3814]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 14 01:57:43 MX03 MailScanner[3814]: Message
70D2347F90.0A30B from 58.33.193.13 (susanah at gay-mail.net) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 14 04:03:30 MX03 MailScanner[3863]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 14 04:03:31 MX03 MailScanner[3863]: Message
E442347F90.0CEF2 from 127.0.0.1 (root at mydomain.com) to
MX03.mydomain.com,root is not spam (whitelisted), SpamAssassin (timed
out)

/var/log/maillog:Mar 14 06:49:58 MX03 MailScanner[3684]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 14 06:49:59 MX03 MailScanner[3684]: Message
62A5B47F8F.5D1D9 from 85.216.44.205 (mmwlpmfvsjb at hotmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 14 08:11:33 MX03 MailScanner[7162]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 14 08:11:34 MX03 MailScanner[7162]: Message
8B70847F8F.4FE93 from 222.191.167.14 (wierzbicki at bluehyppo.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog:Mar 14 08:34:25 MX03 MailScanner[3672]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog:Mar 14 08:34:27 MX03 MailScanner[3672]: Message
CE81647F8F.CF604 from 221.14.241.74 (zdtdvqmgqus at subt-16.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar  9 08:01:46 MX03 MailScanner[2030]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar  9 08:01:47 MX03 MailScanner[2030]: Message
67CA447FA7.9BA57 from 201.138.198.234 (chenchen at 0733.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar  9 08:02:05 MX03 MailScanner[2379]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar  9 08:02:08 MX03 MailScanner[2379]: Message
B26FA47FC0.CB827 from 211.196.198.72 (j_maldonado_fr at netscape.net) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 10 04:07:45 MX03 MailScanner[3572]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 10 08:01:07 MX03 MailScanner[3572]: Message
B0C4C47F90.E284C from 221.152.17.195 (bourqfried at dawgrock.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 10 08:19:04 MX03 MailScanner[2126]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 10 08:19:05 MX03 MailScanner[2126]: Message
19E6747F89.D3A88 from 83.94.161.243 (certain588 at gmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 10 08:19:46 MX03 MailScanner[2476]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 10 08:19:48 MX03 MailScanner[2476]: Message
E6FE147F6E.EFDBC from 83.94.161.243 (phelan.humphry75t at gmail.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 11 15:29:48 MX03 MailScanner[19464]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 11 15:29:55 MX03 MailScanner[19464]: Message
C768447F8A.3C3C1 from 200.149.217.102 (bzn at 0733.com) to mydomain.com is
not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 11 15:44:40 MX03 MailScanner[19473]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 11 15:44:41 MX03 MailScanner[19473]: Message
D9DB447F8D.32594 from 81.193.12.243 (surlesu at is.titech.ac.jp) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 11 17:19:13 MX03 MailScanner[19467]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 11 17:19:14 MX03 MailScanner[19467]: Message
2F2E347F8E.71F12 from 69.201.205.193 (gilbert at first2office.biz) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 12 01:06:39 MX03 MailScanner[19514]: SpamAssassin
timed out and was killed, failure 1 of 10

/var/log/maillog.1:Mar 12 01:06:40 MX03 MailScanner[19514]: Message
1452A47F92.DFF53 from 222.137.180.247 (fgwabrmvom at laptopcentral.com) to
mydomain.com is not spam, SpamAssassin (timed out)

/var/log/maillog.1:Mar 12 03:13:26 MX03 MailScanner[19467]: SpamAssassin
timed out and was killed, failure 2 of 10

/var/log/maillog.1:Mar 12 03:13:27 MX03 MailScanner[19467]: Message
437B147F94.66F30 from 221.202.59.26 (billiessewell_lp at flash.net) to
mydomain.com is not spam, SpamAssassin (timed out)

Thanks,

kosta

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060314/61b7a50e/attachment.html