Mailscanner process mail too slow

[Carlos R Laguna]

El 23/12/14 a las 17:21, Kevin Miller escibió:
> If you haven't already done so, one thing that can help, assuming you have the spare RAM is to add this to your /etc/fstab:
>
> none  /var/spool/MailScanner/incoming  tmpfs   defaults,size=1024m  0 0
>
> That's the working directory where messages are scanned and evaluated.  Doing it in RAM is much faster than on disk.
>
> Adjust the size as appropriate if needed.  I'm using a gig of memory - I could probably get by with a lot less as I don't have that busy of a mail server.
>
> What is Max Children set to in MailScanner.conf?
>
> ...Kevin
> --
> Kevin Miller
> Network/email Administrator, CBJ MIS Dept.
> 155 South Seward Street
> Juneau, Alaska 99801
> Phone: (907) 586-0242, Fax: (907) 586-4500
> Registered Linux User No: 307357
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Carlos R Laguna
>> Sent: Tuesday, December 23, 2014 12:32 PM
>> To: mailscanner at lists.mailscanner.info
>> Subject: Mailscanner process mail too slow
>>
>> Hi everyone, i am having some issue here, but can't figure out what is
>> it, my current box is mailscanner 4.86.6-1 ubuntu 12.04.5.
>> The symptoms are:
>> mail processing too slow
>> in queue are over 15k mail on hold
>> almost no clamscan process
>>
>> mailscanner log http://paste.desdelinux.net/5097
>>
>> Any hint will be great*
>>
>> MailScanner --lint output **(connecting to SpamAssassin cache db take up
>> to 15s)
>>
>>
>> Reading configuration file /opt/MailScanner/etc/MailScanner.conf
>> Reading configuration file /opt/MailScanner/etc/conf.d/baruwa.conf
>> Read 876 hostnames from the phishing whitelist
>> Read 5890 hostnames from the phishing blacklists
>> Config: calling custom init function BaruwaLowScore
>> Baruwa: Populating spam score settings
>> Baruwa: Read 20 spam score settings
>> Config: calling custom init function BaruwaShouldScan
>> Baruwa: Starting scanning settings
>> Baruwa: Read 21 settings
>> Config: calling custom init function BaruwaBlacklist
>> Baruwa: Starting blacklists
>> Baruwa: Read 0 blacklist items
>> Baruwa: Ip blocks blacklisted:
>> Config: calling custom init function BaruwaSQL
>> Baruwa: Starting SQL logger
>> Config: calling custom init function BaruwaHighScore
>> Baruwa: Populating high spam score settings
>> Baruwa: Read 20 high spam score settings
>> Config: calling custom init function BaruwaWhitelist
>> Baruwa: Starting whitelists
>> Baruwa: Read 1 whitelist items
>> Baruwa: Ip blocks whitelisted:
>>
>> Checking version numbers...
>> Version number in MailScanner.conf (4.84.6) is correct.
>>
>> Your envelope_sender_header in spam.assassin.prefs.conf is correct.
>> MailScanner setting GID to  (105)
>> MailScanner setting UID to  (104)
>>
>> Checking for SpamAssassin errors (if you use it)...
>> Using SpamAssassin results cache
>> Connected to SpamAssassin cache database
>> SpamAssassin reported no errors.
>> Connected to Processing Attempts Database
>> Created Processing Attempts Database successfully
>> There are 390 messages in the Processing Attempts Database
>> Using locktype = flock
>> MailScanner.conf says "Virus Scanners = clamav"
>> Found these virus scanners installed: clamav
>> ========================================================================
>> ===
>> Filename Checks: Windows/DOS Executable (1 eicar.com)
>> Other Checks: Found 1 problems
>> Virus and Content Scanning: Starting
>> 1.message: Eicar-Test-Signature FOUND
>>
>> ./1/eicar.com: Eicar-Test-Signature FOUND
>>
>> Virus Scanning: ClamAV found 2 infections
>> Infected message 1 came from 10.1.1.1
>> Virus Scanning: Found 2 viruses
>> ========================================================================
>> ===
>> Virus Scanner test reports:
>> ClamAV said "eicar.com contains Eicar-Test-Signature"
>>
>> If any of your virus scanners (clamav)
>> are not listed there, you should check that they are installed correctly
>> and that MailScanner is finding them correctly via its
>> virus.scanners.conf.
>> Config: calling custom end function BaruwaLowScore
>> Baruwa: Shutting down spam score settings
>> Config: calling custom end function BaruwaShouldScan
>> Baruwa: Shutting down scanning settings
>> Config: calling custom end function BaruwaBlacklist
>> Baruwa: Shutting down blacklists
>> Config: calling custom end function BaruwaSQL
>> Baruwa: Shutting down SQL logger
>> Config: calling custom end function BaruwaHighScore
>> Baruwa: Shutting down high spam score settings
>> Config: calling custom end function BaruwaWhitelist
>> Baruwa: Shutting down whitelists
>>
>> Thanks for your time and effort. regards
>>   ________________________________________________________________
>>   XII Edicion del Evento Nacional de Informatica para Jovenes. INFOCLUB.
>>   Abril. 2015. Ver www.jovenclub.cu
>>   ________________________________________________________________
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
Hi Kevin


Actually ... (This is a container **openvz)

Filesystem      Size  Used Avail Use% Mounted on
/dev/simfs       60G   49G   11G  82% /
none            1.5G  4.0K  1.5G   1% /dev
none            308M   80K  308M   1% /run
none            5.0M     0  5.0M   0% /run/lock
none            1.5G  108K  1.5G   1% /run/shm
tmpfs           1.5G   52M  1.5G   4% /var/spool/MailScanner/incoming
tmpfs           1.5G   68K  1.5G   1% /tmp

  the max of children is 15 in a Intel Xeon x 6 4Gb of ram, at this time 
the mail is flowing again, but it always does at this specific hour so i 
am not sure if the change to clamd work or not.Thanks for your time and 
efforts. Regards
 ________________________________________________________________
 XII Edicion del Evento Nacional de Informatica para Jovenes. INFOCLUB.
 Abril. 2015. Ver www.jovenclub.cu
 ________________________________________________________________


-- 
Este mensaje ha sido analizado por MailScanner
en busca de virus y otros contenidos peligrosos,
y se considera que está limpio.