help - big queue slow load

Wed Jul 29 09:07:56 IST 2009

Looks like installed the new mailscanner but not done the upgrade also check
out about clamd hope it should be clamav module or clam

*Version installed (4.73.4) does not match version stated in
MailScanner.conf file (4.68.8), you may want to run upgrade_MailScanner_conf
*

On Tue, Jul 28, 2009 at 5:12 PM, Marco mangione <marco.mangione at gmail.com>wrote:

> root at filtro6:~# MailScanner -lint output
> Trying to setlogsock(unix)
> Read 817 hostnames from the phishing whitelist
> Read 5141 hostnames from the phishing blacklist
> Config: calling custom init function SQLBlacklist
> Starting up SQL Blacklist
> Read 0 blacklist entries
> Config: calling custom init function MailWatchLogging
> Started SQL Logging child
> Config: calling custom init function SQLWhitelist
> Starting up SQL Whitelist
> Read 2 whitelist entries
> Checking version numbers...
> Version installed (4.73.4) does not match version stated in
> MailScanner.conf file (4.68.8), you may want to run
> upgrade_MailScanner_conf
> to ensure your MailScanner.conf file contains all the latest settings.
>
> ERROR: The "envelope_sender_header" in your spam.assassin.prefs.conf
> ERROR: is not correct, it should match X-COLT-ENGINE-MailScanner-From
>
> MailScanner setting GID to  (33)
> MailScanner setting UID to  (109)
>
> Checking for SpamAssassin errors (if you use it)...
> SpamAssassin temporary working directory is
> /var/spool/MailScanner/incoming/Spam
> SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp
> Using SpamAssassin results cache
> Connected to SpamAssassin cache database
> SpamAssassin reported no errors.
> Using locktype = posix
> MailScanner.conf says "Virus Scanners = clamav"
> Found these virus scanners installed: clamd
> ===========================================================================
> Filename Checks: Windows/DOS Executable (1 eicar.com)
> Other Checks: Found 1 problems
> Virus and Content Scanning: Starting
> /var/spool/MailScanner/incoming/30510/./1.message: Eicar-Test-Signature
> FOUND
>
> /var/spool/MailScanner/incoming/30510/./1/eicar.com: Eicar-Test-Signature
> FOUND
>
> Virus Scanning: ClamAV found 2 infections
> Infected message 1 came from 10.1.1.1
> Infected message 1.message came from
> Virus Scanning: Found 2 viruses
> ===========================================================================
> Virus Scanner test reports:
> ClamAV said "eicar.com contains Eicar-Test-Signature"
>
> If any of your virus scanners (clamd)
> are not listed there, you should check that they are installed correctly
> and that MailScanner is finding them correctly via its virus.scanners.conf.
> Config: calling custom end function SQLBlacklist
> Closing down by-domain spam blacklist
> Config: calling custom end function MailWatchLogging
> Config: calling custom end function SQLWhitelist
> Closing down by-domain spam whitelist
> root at filtro6:~#
>
>
> 2009/7/28 shprahi shprahi <shprahi at gmail.com>
>
>> What is MailScanner version and MailScanner --lint output also
>> spamassassin --lint output
>>
>> Just see is there any errors on the output
>>
>> On Tue, Jul 28, 2009 at 4:43 PM, Marco mangione <marco.mangione at gmail.com
>> > wrote:
>>
>>> this is the detail of bayes table
>>>
>>> | bayes_seen        | BASE TABLE |   406301568 | MyISAM |
>>> | bayes_token       | BASE TABLE |  1028785670 | MyISAM |
>>>
>>>
>>>
>>> 2009/7/28 Marco mangione <marco.mangione at gmail.com>
>>>
>>> seems there are some hang when mailscanner connect to SA db .. that is
>>>> bigger than 2GB.... what can i do in this case ?
>>>>
>>>> 2009/7/28 MailScanner <MailScanner at ecs.soton.ac.uk>
>>>>
>>>>> If the mail is only being processed very slowly, then unless you have
>>>>> the parallelism set too *high* (Max Children should be 5 to start with) then
>>>>> there must be some good reason why it is taking a long time. Set "Log Speed
>>>>> = yes" in MailScanner.conf and restart MailScanner. Then look at your logs
>>>>> and work out what is taking all the time?
>>>>>
>>>>> When you ran with "--debug --sa-debug", were there any long pauses in
>>>>> the output? There shouldn't be, once it has started doing the spam scanning.
>>>>>
>>>>> Also, you can try switching off the spam scanning altogether, just to
>>>>> double check that is where the problem lies and not in your virus scanning.
>>>>> What is "Virus Scanners =" set to in MailScanner.conf?
>>>>>
>>>>> On Tue, 28 Jul 2009 10:48:42 +0200, Marco mangione <
>>>>> marco.mangione at gmail.com> wrote:
>>>>>
>>>>> DNS are ok. resolution are quick.
>>>>> can i try to increase parallels postfix or mailscanner process ?
>>>>> server have much cpu and ram unused...
>>>>>
>>>>>
>>>>> 2009/7/27 Julian Field <MailScanner at ecs.soton.ac.uk>
>>>>>
>>>>>> Most likely DNS lookups. Check your DNS is working properly and you
>>>>>> can reach all the blacklists you use very quickly.
>>>>>>
>>>>>> Start by doing a "MailScanner --debug --sa-debug" and watch for any
>>>>>> long pauses.
>>>>>>
>>>>>> On 27/07/2009 11:29, Marco mangione wrote:
>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> i have a big queue: 3800mails and very slow load: 0.20 seems postfix
>>>>>>> and mailscanner dont want use server resource to speed up ... any idea?
>>>>>>>
>>>>>>> marco
>>>>>>>
>>>>>>
>>>>>>  Jules
>>>>>>
>>>>>> --
>>>>>> Julian Field MEng CITP CEng
>>>>>> www.MailScanner.info
>>>>>> Buy the MailScanner book at www.MailScanner.info/store
>>>>>>
>>>>>> Need help customising MailScanner?
>>>>>> Contact me!
>>>>>> Need help fixing or optimising your systems?
>>>>>> Contact me!
>>>>>> Need help getting you started solving new requirements from your boss?
>>>>>> Contact me!
>>>>>>
>>>>>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>>>>>> Follow me at twitter.com/JulesFM and twitter.com/MailScanner
>>>>>>
>>>>>>
>>>>>> --
>>>>>> This message has been scanned for viruses and
>>>>>> dangerous content by MailScanner, and is
>>>>>> believed to be clean.
>>>>>>
>>>>>> --
>>>>>> MailScanner mailing list
>>>>>> mailscanner at lists.mailscanner.info
>>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>>
>>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>>
>>>>>> Support MailScanner development - buy the book off the website!
>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> JulesMailScanner at ecs.soton.ac.uk
>>>>>
>>>>>
>>>>> --
>>>>> This message has been scanned for viruses and
>>>>> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and
>>>>> is
>>>>> believed to be clean.
>>>>>
>>>>> --
>>>>> MailScanner mailing list
>>>>> mailscanner at lists.mailscanner.info
>>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>>
>>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>>>
>>>>>
>>>>
>>>
>>> --
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>
>>> Before posting, read http://wiki.mailscanner.info/posting
>>>
>>> Support MailScanner development - buy the book off the website!
>>>
>>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090729/0f5ad0e9/attachment.html