Spamassassin Timeout issue.

[Alex Neuman van der Hans]

In less technical terms, upgrade bind asap.

Sent from my iPhone

On Sep 10, 2008, at 10:29 AM, "Randal, Phil" =
<prandal at herefordshire.gov.uk=20
 > wrote:

> "query-source address * port 53;"
>
> Eek!  Repeat after me 10 times: "Dan Kaminsky".
>
> Time to do a sanity check on all your DNS setups to ensure you have =20=

> current BINDs with randomised source ports for queries.
>
> Cheers,
>
> Phil
>
> --
> Phil Randal
> Networks Engineer
> Herefordshire Council
> Hereford, UK
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info =
[mailto:mailscanner-bounces at lists.mailscanner.info=20
> ] On Behalf Of Marcello Anderlini
> Sent: 10 September 2008 15:59
> To: 'MailScanner discussion'
> Subject: R: Spamassassin Timeout issue.
>
> I beg your pardon but I have the same problem and I looking for a =20
> solution since many month.
>
> On my system is installed a dns server resolving also our domain.
>
> Very often during the day, unexpectedly without change nothing =20
> spamassassin starts to run very slowly.
> I have followed all the tips founded but without success. Could be a =20=

> dns problem ?
> This is my extract from my dns configuration. Is it enough to set it =20=

> also as a cache dns ?
>
> Thanks and sorry for my worst english.
>
>
>
>
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> options {
> # file di boot per named
>        directory "/var/named";
>        forwarders { 83.216.172.1;83.216.172.2;213.234.128.211; };
>        query-source address * port 53;
> };
>
> logging {
>  channel local_log {
>   /*
>    * Use a file channnel. The file is
>    * /var/log/named.log. [Why the ".log"
>    * suffix?] Keep 2 versions of the file
>    * and don't let it get bigger than 1 Mb.
>    */
> #   file "/var/log/named.log"
>   file "/var/log/named/named.log"
>   versions 2 size 1M;
>   print-time yes;
>  };
>  category default {
>   /*
>    * Send every log category to the
>    * local_log channel defined above.
>    */
>   local_log;
>  };
> };
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>
>
> Dr. Marcello Anderlini
> m.anderlini at database.it
> ---------------------------------------------
> Database Informatica S.r.l.
> Microsoft Certified Partner
> Tel.  +39059775070
> Fax. +39059779545
> http://www.database.it <http://www.database.it/>
> ---------------------------------------------
>
>
> ________________________________
>
> Da: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] Per conto di =20
> Alex Neuman
> van der Hans
> Inviato: mercoled=A8=AC 10 settembre 2008 16.22
> A: MailScanner discussion
> Cc: MailScanner discussion
> Oggetto: Re: Spamassassin Timeout issue.
>
>
> When spamassassin times out, it usually is because of a DNS issue.
> Restarting works in your case probably because people trying to =20
> connect to
> your server "back off" when you restart it because to them it looks =20=

> like
> your server died. They take pity and don't bother it for a while. =20
> When they
> see it back online, the load and backlog rises.
>
> Sent from my iPhone
>
> On Sep 10, 2008, at 9:05 AM, "Swati Meghanand" =
<swati.meghanand at gmail.com=20
> >
> wrote:
>
>
>
>    hi,
>
>    I am not running any name server on the same machine, actually I am
> having a fail-over cluster of 3 machine having same configuration/=20
> setting I
> facing this prob in 2 machines the another thts 3rd is running =20
> smoothly...
>
>
>    When I restart machine it works well for atleast 12-15 Hrs.(But
> restarting Mailscanner didn't helped me)
>
>    Did u mean this could be a DNS related issue....
>
>    Regards,
>
>    Swati Meghanand
>
>
>    2008/9/10 Alex Neuman van der Hans < <mailto:alex at rtpty.com>
> alex at rtpty.com>
>
>
>        It's actually quite clearly indicating the opposite. You are
> not reading the logs right. If spamassassin is timing out, you need =20=

> to take
> care of that. What caching nameserver are you running on that box?
>
>        Sent from my iPhone
>
>
>        On Sep 10, 2008, at 3:54 AM, "Swati Meghanand" <
> <mailto:swati.meghanand at gmail.com> swati.meghanand at gmail.com> wrote:
>
>
>
>            Hi,
>
>            I'm using mailscanner on a busy mail gateways from
> serveral months, which was working fine so far.=46rom last few days I =20=

> noticed
> incresed no of spam mails as well log Filtering queues (ofcourse slow
> processing of mailscanner).In log file of mailscanner I found =20
> following
> lines,
>
>            Sep 10 04:47:29 localhost MailScanner[11027]: Virus
> and Content Scanning: Starting
>            Sep 10 04:47:37 localhost MailScanner[8400]:
> SpamAssassin timed out and was killed, failure 8 of 20
>            Sep 10 04:47:37 localhost MailScanner[8680]:
> SpamAssassin timed out and was killed, failure 14 of 20
>            Sep 10 04:47:38 localhost MailScanner[8680]: Message
> 1KdL6x-0005q5-L3 from xx.xx.xx.xx (xxx at xxx.x) to xxx.xx is not spam,
> SpamAssassin (not cached, timed out)
>            Sep 10 04:47:38 localhost MailScanner[8400]: Message
> 1KdLDG-0006se-Ox from xx.xx.xx.xx (xxx at xx.xxx) to xxx.xx is not spam,
> SpamAssassin (not cached, timed out)
>
>            it clealy indicates mailscanner is not (able to)
> scanning messages.
>
>            Any idea about this issue.
>
>            Thanks in advance :-)
>
>            Regards
>
>            Swati Meghanand
>
>
>
>
>            --
>            MailScanner mailing list
>            <mailto:mailscanner at lists.mailscanner.info>
> mailscanner at lists.mailscanner.info
>
> <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>            Before posting, read
> <http://wiki.mailscanner.info/posting> =
http://wiki.mailscanner.info/posting
>
>            Support MailScanner development - buy the book off
> the website!
>
>
>        --
>        MailScanner mailing list
>        <mailto:mailscanner at lists.mailscanner.info>
> mailscanner at lists.mailscanner.info
>        <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>        Before posting, read <http://wiki.mailscanner.info/posting>
> http://wiki.mailscanner.info/posting
>
>        Support MailScanner development - buy the book off the
> website!
>
>
>
>    --
>    MailScanner mailing list
>    mailscanner at lists.mailscanner.info
>    http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>    Before posting, read <http://wiki.mailscanner.info/posting>
> http://wiki.mailscanner.info/posting
>
>    Support MailScanner development - buy the book off the website!
>
>
>
> --=20
> Messaggio verificato dal servizio antivirus di Database Informatica
> <http://www.database.it/> .
>
>
> --=20
> Messaggio verificato dal servizio antivirus di Database Informatica
>
> --=20
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!