spamassassin timeouts help

Tue Mar 14 16:55:54 GMT 2006

When I see large amounts of SpamAssassin timeouts is when one or more of 
the DNSBLs are not responding (happens occasionally). The the wait time 
builds up and causes SpamAssassin to timeout. Also if you local 
recursive DNS server (used by your gateways) is slow doing lookups that 
could be a problem too.

Kosta Lekas wrote:

> Hi everyone,
>
> I would like to figure out how to prevent or minimize spamassassin 
> timeouts. Problem is I’m not exactly sure what causes it to time out 
> in the first place (if someone can explain it to me that would be 
> great). I have 3 MailScanner gateways running on different DMZ’s, 
> MX01, MX02, and MX03.
>
> 1. MX01 is used primarily for mail archiving relay to IronMountain. I 
> have an internal MS Exchange server, anything sent or received by any 
> of my users is archived to archiveaddress at ironmountain.com 
> <mailto:archiveaddress at ironmountain.com>; It is relayed from Exchange 
> box to MX01 and then to IronMountain’s SMTP servers. MX01 is also a 
> backup MX listed in my public mx pool with a high weight so I do see a 
> lot of spammers trying to hit it. This guy processes an average of 
> 2500 messages a day and 1/80 mails get spamassassin timeouts on this 
> relay.
>
> 2. MX02 is my outgoing (internet bound relay) as well as my primary 
> incoming mail server listed with the lowest weight in public DNS. This 
> guy processes an average of 1200 messages a day and 1/190 mails get 
> spamassassin timeouts on this relay.
>
> 3. MX03 is a backup relay for internetbound and incoming and is listed 
> in public DNS with a higher weight that MX02 so I do see a lot of 
> spammers try to hit it. This guy processes only 120 messages a day and 
> 1/10 mails get spamassassin timeouts on this relay.
>
> What is getting me is the low amount of messages that MX03 is 
> receiving but yet is having so many spamassassin timeouts. Most of the 
> spam that gets thru has come from MX03 and from examination of the 
> headers I can see that spamassassin timed out, but it does catch about 
> 50 a day. Why so many timeouts on this guy. I have included some log 
> entries at the end of this email.
>
> On All 3 relays:
>
> Max Spam List Timeouts = 7
>
> Spam List Timeouts History = 10
>
> Max SpamAssassin Timeouts = 10
>
> SpamAssassin Timeouts History = 30
>
> Max Custom Spam Scanner Timeouts = 10
>
> MCP Max SpamAssassin Timeouts = 20
>
> The only thing different on MX03 is that I am using the latest 
> MailScanner with the feature “Cache SpamAssassin Results = yes”
>
> Here are the Specs for all three relays as you can see MX02 has the 
> best hardware, MX03 comes in second and then MX01.
>
> MX01 specs:
>
> 1 CPU Pentium 3, 1.4GHz, 500MB of ram
>
> Red Hat Enterprise Linux WS release 4 (Nahant Update 2)
>
> Perl version 5.008005 (5.8.5)
>
> MailScanner version 4.42.9
>
> postfix-2.1.5-4.2.RHEL4
>
> spamassassin-3.0.4-1_25.el4.at (using DCC)
>
> clamav-0.87-1.2.el4.rf
>
> MX02 specs:
>
> Dual Xeon, 3.2GHz, 4GB of ram
>
> Red Hat Enterprise Linux WS release 4 (Nahant Update 2)
>
> Perl version 5.008005 (5.8.5)
>
> MailScanner version 4.45.4
>
> postfix-2.1.5-4.2.RHEL4
>
> spamassassin-3.0.4-1.el4 (using DCC)
>
> clamav-0.87-1.2.el4.rf
>
> MX03 specs:
>
> Dual Xeon, 2.8GHz, 2G of ram
>
> Fedora Core release 4 (Stentz)
>
> Perl version 5.008006 (5.8.6)
>
> MailScanner version 4.51.4
>
> postfix-2.2.2-2
>
> spamassassin-3.0.4-2.fc4 (using DCC, using spamassassin cache feature)
>
> clamav-0.88-1.fc4 (using clamavmodule)
>
> Here are some log entries from MX03 showing the timeouts:
>
> /var/log/maillog:Mar 12 04:17:23 MX03 MailScanner[19465]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 04:17:24 MX03 MailScanner[19465]: Message 
> B083647F8F.C006E from 218.18.181.156 (aostos at abt.com.tr) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 04:20:10 MX03 MailScanner[19578]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 04:20:11 MX03 MailScanner[19578]: Message 
> BDC6747F8F.7787A from 59.5.144.136 
> (snd_pcm_hw_params_set_period_size_first at glennedward.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 09:22:06 MX03 MailScanner[19522]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 09:22:08 MX03 MailScanner[19522]: Message 
> 90FC847F8F.4E65E from 59.37.63.81 (gustavo_woodscy at lycos.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 12:58:47 MX03 MailScanner[22385]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 12:58:48 MX03 MailScanner[22385]: Message 
> E7D6947F80.842A4 from 66.215.18.215 (hugh at paramed.biz) to mydomain.com 
> is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 13:39:04 MX03 MailScanner[19470]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 13:39:05 MX03 MailScanner[19470]: Message 
> C111847F83.490CD from 127.0.0.1 (root at mydomain.com) to mydomain.com is 
> not spam (whitelisted), SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 13:46:23 MX03 MailScanner[23571]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 13:46:24 MX03 MailScanner[23571]: Message 
> 5658947F85.94B60 from 68.164.134.210 (stitti at bhb.com) to mydomain.com 
> is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 13:53:51 MX03 MailScanner[28831]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 13:53:53 MX03 MailScanner[28831]: Message 
> 6731247F85.D2DA7 from 203.210.151.43 (cmzcuoniucu at hotmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 14:00:28 MX03 MailScanner[23788]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 14:00:29 MX03 MailScanner[23788]: Message 
> E04A347F8A.4DAC5 from 200.165.21.104 (lnpykciriii at hotmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 15:45:25 MX03 MailScanner[9593]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 15:45:26 MX03 MailScanner[9593]: Message 
> CC93847F88.B0E03 from 80.108.24.113 (plsnutrionists at mdgekko.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 19:09:09 MX03 MailScanner[13504]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 19:09:10 MX03 MailScanner[13504]: Message 
> CC63347F8F.EEFAC from 200.113.75.224 (jvyxcjyidqa at hotmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 21:07:08 MX03 MailScanner[25699]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 21:07:09 MX03 MailScanner[25699]: Message 
> 7D7F647F94.91C50 from 58.168.170.253 (i_golodnikov at inbox.ru) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 21:07:15 MX03 MailScanner[12264]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 21:07:16 MX03 MailScanner[12264]: Message 
> 619A447F9A.40F2D from 58.168.170.253 (donoghue.laginaqa4 at gmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 12 21:15:18 MX03 MailScanner[20260]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 12 21:15:19 MX03 MailScanner[20260]: Message 
> 8C0BF47F8F.33EA1 from 222.109.255.235 (info at mydomain.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 04:03:31 MX03 MailScanner[15384]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 04:03:32 MX03 MailScanner[15384]: Message 
> 852C947F8F.2A2E0 from 127.0.0.1 (root at mydomain.com) to 
> MX03.mydomain.com,root is not spam (whitelisted), SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 04:36:53 MX03 MailScanner[19666]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 04:36:54 MX03 MailScanner[19666]: Message 
> 782C047F8F.16EAF from 222.67.132.244 (xaviert at methodistemail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 04:37:33 MX03 MailScanner[13163]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 04:37:35 MX03 MailScanner[13163]: Message 
> D990D47F95.A54A4 from 83.35.242.23 (wzjgjztcpeo at hotmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 08:38:49 MX03 MailScanner[15435]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 08:38:50 MX03 MailScanner[15435]: Message 
> 5715F47F8F.6E0A8 from 218.13.88.109 (carls2 at yahoo.com) to mydomain.com 
> is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 09:09:20 MX03 MailScanner[15142]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 09:09:21 MX03 MailScanner[15142]: Message 
> 6F64047F8F.ACCA1 from 84.72.68.253 (john at eu-vest.biz) to mydomain.com 
> is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 09:59:44 MX03 MailScanner[15689]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 09:59:45 MX03 MailScanner[15689]: Message 
> 8704F47F8E.4A095 from 221.158.30.189 
> (sherrietomlinsonnm at visuallink.com) to mydomain.com is not spam, 
> SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 10:19:36 MX03 MailScanner[29901]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 10:19:38 MX03 MailScanner[29901]: Message 
> D6DF047F8E.86E7D from 216.222.251.75 (danosusu at hearngroup.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 10:30:43 MX03 MailScanner[29902]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 10:30:44 MX03 MailScanner[29902]: Message 
> 4902E47F8E.39042 from 82.246.244.31 
> (toiubpvcbdttm at math-info.univ-paris5.fr) to mydomain.com is not spam, 
> SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 16:56:59 MX03 MailScanner[31306]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 16:57:01 MX03 MailScanner[31306]: Message 
> BE6C947F8F.4CBDE from 70.92.73.132 (richard at guitarra.biz) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 18:26:02 MX03 MailScanner[31312]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 18:26:04 MX03 MailScanner[31312]: Message 
> 4D6BF47F6E.8DA38 from 69.143.26.250 (henry at pradella.biz) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 13 18:27:43 MX03 MailScanner[31263]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 13 18:27:44 MX03 MailScanner[31263]: Message 
> EF85B47F97.9CD6C from 24.0.25.137 (john at pistonheads.biz) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 14 01:57:42 MX03 MailScanner[3814]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 14 01:57:43 MX03 MailScanner[3814]: Message 
> 70D2347F90.0A30B from 58.33.193.13 (susanah at gay-mail.net) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 14 04:03:30 MX03 MailScanner[3863]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 14 04:03:31 MX03 MailScanner[3863]: Message 
> E442347F90.0CEF2 from 127.0.0.1 (root at mydomain.com) to 
> MX03.mydomain.com,root is not spam (whitelisted), SpamAssassin (timed out)
>
> /var/log/maillog:Mar 14 06:49:58 MX03 MailScanner[3684]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 14 06:49:59 MX03 MailScanner[3684]: Message 
> 62A5B47F8F.5D1D9 from 85.216.44.205 (mmwlpmfvsjb at hotmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 14 08:11:33 MX03 MailScanner[7162]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 14 08:11:34 MX03 MailScanner[7162]: Message 
> 8B70847F8F.4FE93 from 222.191.167.14 (wierzbicki at bluehyppo.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog:Mar 14 08:34:25 MX03 MailScanner[3672]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog:Mar 14 08:34:27 MX03 MailScanner[3672]: Message 
> CE81647F8F.CF604 from 221.14.241.74 (zdtdvqmgqus at subt-16.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 9 08:01:46 MX03 MailScanner[2030]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 9 08:01:47 MX03 MailScanner[2030]: Message 
> 67CA447FA7.9BA57 from 201.138.198.234 (chenchen at 0733.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 9 08:02:05 MX03 MailScanner[2379]: SpamAssassin 
> timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 9 08:02:08 MX03 MailScanner[2379]: Message 
> B26FA47FC0.CB827 from 211.196.198.72 (j_maldonado_fr at netscape.net) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 10 04:07:45 MX03 MailScanner[3572]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 10 08:01:07 MX03 MailScanner[3572]: Message 
> B0C4C47F90.E284C from 221.152.17.195 (bourqfried at dawgrock.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 10 08:19:04 MX03 MailScanner[2126]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 10 08:19:05 MX03 MailScanner[2126]: Message 
> 19E6747F89.D3A88 from 83.94.161.243 (certain588 at gmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 10 08:19:46 MX03 MailScanner[2476]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 10 08:19:48 MX03 MailScanner[2476]: Message 
> E6FE147F6E.EFDBC from 83.94.161.243 (phelan.humphry75t at gmail.com) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 11 15:29:48 MX03 MailScanner[19464]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 11 15:29:55 MX03 MailScanner[19464]: Message 
> C768447F8A.3C3C1 from 200.149.217.102 (bzn at 0733.com) to mydomain.com 
> is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 11 15:44:40 MX03 MailScanner[19473]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 11 15:44:41 MX03 MailScanner[19473]: Message 
> D9DB447F8D.32594 from 81.193.12.243 (surlesu at is.titech.ac.jp) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 11 17:19:13 MX03 MailScanner[19467]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 11 17:19:14 MX03 MailScanner[19467]: Message 
> 2F2E347F8E.71F12 from 69.201.205.193 (gilbert at first2office.biz) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 12 01:06:39 MX03 MailScanner[19514]: 
> SpamAssassin timed out and was killed, failure 1 of 10
>
> /var/log/maillog.1:Mar 12 01:06:40 MX03 MailScanner[19514]: Message 
> 1452A47F92.DFF53 from 222.137.180.247 (fgwabrmvom at laptopcentral.com) 
> to mydomain.com is not spam, SpamAssassin (timed out)
>
> /var/log/maillog.1:Mar 12 03:13:26 MX03 MailScanner[19467]: 
> SpamAssassin timed out and was killed, failure 2 of 10
>
> /var/log/maillog.1:Mar 12 03:13:27 MX03 MailScanner[19467]: Message 
> 437B147F94.66F30 from 221.202.59.26 (billiessewell_lp at flash.net) to 
> mydomain.com is not spam, SpamAssassin (timed out)
>
> Thanks,
>
> kosta
>

-- 

Dennis Willson (taz at taz-mania.com)

Owner, Operator of Kepnet Internet Services
http://www.kepnet.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: taz.vcf
Type: text/x-vcard
Size: 229 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060314/fbd24670/taz.vcf