Too messages in Hold folder when spamassassin is activated in MailScanner

[Glenn Steen]

On 25/11/2007, Israel Garcia <igalvarez at gmail.com> wrote:
> On Nov 25, 2007 2:46 PM, Glenn Steen <glenn.steen at gmail.com> wrote:
>
> >
> >
> >
> > On 25/11/2007, Israel Garcia <igalvarez at gmail.com> wrote:
> > > Hi all, I'm running MailScanner-4.65-3.1(with DCC, razor2, pyzor) on a
> > > CentOS4.5 Linux server. I installed too the package
> > > install-Clam-0.91.2-SA-3.2.3.tar.gz in order to
> activate spamassassin
> > > with mailscanner. I ran spamassassin -D --lint and there's no problem
> > > in my configuration files. I also see in maillog file the spamassassin
> > > doing its work with spam:
> > >
> > > Nov 25 04:54:51 hostname  MailScanner[20611]: Message B25732B1DB.A9A63
> > > from 75.93.188.141 (jerrimy at donin.com) to mydomain.com is spam,
> > > SBL+XBL, spamcop.net , SpamAssassin (not cached, score=30.984, required
> > > 6, DCC_CHECK 1.37, FH_HELO_EQ_D_D_D_D 0.50, FS_REPLICA 1.18,
> > > HELO_DYNAMIC_IPADDR2 4.39, HTML_MESSAGE 0.00, RATWARE_MS_HASH 2.78,
> > > RATWARE_OUTLOOK_NONAME 0.00, RCVD_IN_BL_SPAMCOP_NET 2.19, RCVD_IN_XBL
> > > 2.90, RDNS_DYNAMIC 0.10, SARE_SPEC_REPLICA_OBFU 1.81,
> > > SARE_SPEC_ROLEX_NOV5A 1.06, TVD_RCVD_IP 1.62, URIBL_AB_SURBL 1.61,
> > > URIBL_BLACK 1.96, URIBL_JP_SURBL 2.86, URIBL_OB_SURBL 2.13,
> > > URIBL_SC_SURBL 2.52)
> > >
> > > Everything is fine BUT, when I run "qshape hold" I see the HOLD folder
> > > is FULL of messages waiting to be processed, I mean thousands of mails
> > > waiting and there is a long delay in delivering.
> > > My link to internet is not full, I mean I see the normal traffic.
> > >
> > > So, when I turn off spamassassin in MailScanner.conf there's almost no
> > > messages in HOLD foder.
> > >
> > > My questions are:
> > >
> > > 1. How can I speed the spamassassin process in my server?
> > Use a caching only DNS, limit what you check (RBLs etc).... There are
> > some things to do:-)
> >
> >
>
> I have in this server a caching only DNS...
> >
> >
> > > 2. Do I have to use all the plugins (DCC, razor2, pyzor, spamcop, and
> > > others that comes activated by default  when I install spamassassin
> > > package)?
> > No. But they all contribute something:-). WRT Pyzor, make sure you use
> > the "alternative" server, the official one will likely just time out.
> > What modules do you load?
>
> I use DCC, razor2, pyzor and all the stuff from /etc/mail/spamassassin
> config files:
>
> -rw-r--r--  1 root root   1089 Jun  2 13:40 init.pre
> lrwxrwxrwx  1 root root     41 Jun  2 21:43 local.cf ->
> /etc/MailScanner/spam.assassin.prefs.conf
You shouldn't have local.cf as a link to spam.assassin.prefs.conf....
That was more a thing some did before the advent of the mailscanner.cf
link.
local.cf is a perfect place to have local rescoring etc ... Like
setting dead RBLs to score 0 (thus preventing a timeout problem), or
RBLs that might be ... problematic (like if you get firewalled by
spamhaus... Check recent threads on the list for a simple test to see
if you've been FW'd by them).

> lrwxrwxrwx  1 root root     41 Nov 24 11:00 mailscanner.cf ->
> /etc/MailScanner/spam.assassin.prefs.conf
> drwxr-xr-x  3 root root   4096 Nov 24 15:43 old
> drwxr-xr-x  2 root root   4096 Nov 25 05:05 RulesDuJour
> drwx------  2 root root   4096 Nov 25 05:08 sa-update-keys
> -rw-r--r--  1 root root   2439 Jun  2 14:03 v310.pre
> -rw-r--r--  1 root root    922 Jun  2 13:39 v312.pre
> -rw-r--r--  1 root root   2299 Jun  2 13:40 v320.pre

I was more thinking along the lines of what loadmodule statements that
you have active:-). Check that ASN isn't loaded... for example:-).
If you like, paste result of
# grep -i loadplug /etc/mail/spamassassin/*.pre
...

(snip)
> I'm running to read them NOW! :-)
Good. The message never received is the least loading...:-).

>
> >
> >
> >
> > > 4. Does anybody knows some perfect setup (best perfomance) to install
> > > mailscanner with spamssassin? some link? some tutorial?
> > Perfect is too much to aim for;-). I usually try for functional:-):-)
>
> :-) :-) .. thanks a lot Glenn
:-)

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se