Too messages in Hold folder when spamassassin is activated in MailScanner

[UxBoD]

i would ask why your line is full ? are your users using it for HTTP ???

Regards,

--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854  36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net

----- Original Message -----
From: "Israel Garcia" <igalvarez at gmail.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Tuesday, November 27, 2007 9:22:03 PM (GMT) Europe/London
Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner


On Nov 27, 2007 4:01 PM, UxBoD < uxbod at splatnix.net > wrote: 



So when disabling RBLs the problem disappears. 

No, the problem disapear when I turn off spamassassin completily in mailscanner config file. Sometimes I enable Spamassassin check but disable razor2, DCC and pyzor in spam.assassin.prefs.conf and it work better.. BUT, if I fully enalbe spamassassin with DCC, razor2 and pyzor the load average begins to increase and thousands of mails begins comes to HOLD folder .. Do you think it's time to split the load in two servers? I mean something like this: 
Router 
NAT rules to SMTP farm serves. 
I 
I 
______________________________ 
I I 
Server2 SMTP Server1 SMTP 
Mailscanner/sa Mailscanner/sa 

I think I have two problems, to much spam (80% of total emails --> from vispan) and my the line 256k/frame relay is FULL. 

Any other ideas? 
Israel 



Thats a start! If your bandwidth is saturated then lookups are taking a long time. Is your Internet connection being over utilised ? Sorry not at machine to check the RBLs you are using. 


Regards, 

--[ UxBoD ]-- 
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" 
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B 
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B 
// Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net 

----- Original Message ----- 
From: "Israel Garcia" < igalvarez at gmail.com > 
To: "MailScanner discussion" < mailscanner at lists.mailscanner.info > 

Sent: Tuesday, November 27, 2007 8:37:53 PM (GMT) Europe/London 
Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner 



On Nov 27, 2007 1:11 PM, UxBoD < uxbod at splatnix.net > wrote: 



Well ASN is hashed out in your v320 pre file but is still active in the v310 file. 
What does it means? 



We process over 100k messages a day on a 256k line so no real worries there. You say a high percentage of your traffic is SMTPr ba, how are you identifying that ? 




I can see the traffic in my WAN network using a cisco router/netflow collector. 


Are you performing any sort of packet shaping or QoS then ? 
No 


It does sound to me like DNS timeouts when performing lookups, as others have also said. 
Well, I use a only caching dns (caching-nameserver-7.3-3) 


If you set the list of RBLs to check to blank in MailScanner.conf does the problem disappear ? 
Do you mean thie line: 
Spam List = #ORDB-RBL SBL+XBL spamcop.net NJABL SORBS # 

When the problem disappear is when I set: 
Use Spamassassin = no 
and restart mailscanner... 

thanks in advance 
Israel 




Regards, 

--[ UxBoD ]-- 
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import" 
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B 
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B 
// Phone: +44 845 869 2749 SIP Phone: uxbod at sip.splatnix.net 


----- Original Message ----- 
From: "Israel Garcia" < igalvarez at gmail.com > 
To: "MailScanner discussion" < mailscanner at lists.mailscanner.info > 
Sent: Tuesday, November 27, 2007 4:50:20 PM (GMT) Europe/London 
Subject: Re: Too messages in Hold folder when spamassassin is activated in MailScanner 


On Nov 25, 2007 3:56 PM, Glenn Steen < glenn.steen at gmail.com > wrote: 


-- 
This message has been scanned for viruses and 
dangerous content by MailScanner , and is 
believed to be clean. 
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.