What is causing this delay?

Tue Aug 28 03:26:49 UTC 2018

Setup a caching DNS server on the same box and you should see those numbers drop from 10 seconds to about 2 seconds or less. Just finished testing this in the lab. 

--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605

-----Original Message-----
From: MailScanner <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> On Behalf Of Denis Beauchemin
Sent: Monday, August 27, 2018 09:30
To: mailscanner at lists.mailscanner.info
Subject: What is causing this delay?

Hello all,

After many years away from MailScanner I installed new MS servers a couple of weeks ago. I’m happy to see that MS has continued to thrive!

Now my problem: my 2 new servers are running into some timeout during messages scan as can be seen here:
[root at smtpi3 conf.d]# MailScanner --lint 2>&1 | while true; do read l; echo "$(date +%T): $l";done
08:01:56: Trying to setlogsock(unix)
08:01:56:
08:01:56: Reading configuration file /etc/MailScanner/MailScanner.conf
08:01:56: Reading configuration file /etc/MailScanner/conf.d/README
08:01:56: Reading configuration file /etc/MailScanner/conf.d/UdeS.conf
08:01:56: Read 1500 hostnames from the phishing whitelist
08:01:56: Read 17028 hostnames from the phishing blacklists
08:01:56:
08:01:56: Checking version numbers...
08:01:56: Version number in MailScanner.conf (5.0.7) is correct.
08:01:56:
08:01:56: Your envelope_sender_header in spamassassin.conf is correct.
08:01:56:
08:01:56: Checking for SpamAssassin errors (if you use it)...
08:01:56: Using SpamAssassin results cache
08:01:56: Connected to SpamAssassin cache database
08:02:14: SpamAssassin reported no errors.
08:02:14: Connected to Processing Attempts Database
08:02:14: Created Processing Attempts Database successfully
08:02:14: There is 1 message in the Processing Attempts Database
08:02:14: Using locktype = posix
08:02:14: MailScanner.conf says "Virus Scanners = clamd"
08:02:14: Found these virus scanners installed: clamd
08:02:14: ===========================================================================
08:02:14: Filename Checks: Windows/DOS Executable (1 eicar.com)
08:02:14: Other Checks: Found 1 problems
08:02:14: Virus and Content Scanning: Starting
08:02:14: Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
08:02:14: Virus Scanning: Clamd found 1 infections
08:02:14: Infected message 1 came from 10.1.1.1
08:02:14: Virus Scanning: Found 1 viruses
08:02:14: ===========================================================================
08:02:14: Virus Scanner test reports:
08:02:14: Clamd said "eicar.com was infected: Eicar-Test-Signature"
08:02:14:
08:02:14: If any of your virus scanners (clamd)
08:02:14: are not listed there, you should check that they are installed correctly
08:02:14: and that MailScanner is finding them correctly via its virus.scanners.conf.

If you look at the timestamps between "Connected to SpamAssassin cache database" and "SpamAssassin reported no errors", you'll see a 18 seconds delay, which seems excessive. I've redone this many times and it never goes lower than 10 seconds.

If I do a "MailScanner --debug-sa" I get the following delays:
In Debugging mode, not forking...
Trying to setlogsock(unix)
08:18:36 Aug 24 08:18:36.710 [10096] dbg: logger: adding facilities: all ...
08:18:37 Aug 24 08:18:37.643 [10096] dbg: rules: run_eval_tests - compiling eval code: 13, priority 0
08:18:37 Aug 24 08:18:37.644 [10096] dbg: dns: entering helper-app run mode
08:18:42 Aug 24 08:18:42.645 [10096] dbg: dns: leaving helper-app run mode ...
08:18:42 Building a message batch to scan...
08:19:36 Have a batch of 1 message.
08:19:36 Stopping now as you are debugging me.

I tried to look at the dns settings but couldn't figure out what might be off. I am not running a caching nameserver. My old MS servers are not either and do not show this delay.

Thanks for you help.

I'm running this version:
[root at smtpi3 conf.d]# MailScanner -v
Running on
Linux smtpi3.usherbrooke.ca 3.10.0-862.11.6.el7.x86_64 #1 SMP Fri Aug 10 16:55:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux This is Red Hat Enterprise Linux Server release 7.5 (Maipo) This is Perl version 5.016003 (5.16.3)

This is MailScanner version 5.0.7
Module versions are:
1.01    AnyDBM_File
1.30    Archive::Zip
0.29    bignum
1.26    Carp
2.061   Compress::Zlib
1.119   Convert::BinHex
0.18    Convert::TNEF
2.145   Data::Dumper
2.30    Date::Parse
1.04    DirHandle
1.11    Fcntl
2.84    File::Basename
2.23    File::Copy
2.02    FileHandle
2.09    File::Path
0.2301  File::Temp
0.92    Filesys::Df
3.69    HTML::Entities
3.71    HTML::Parser
3.69    HTML::TokeParser
1.16    IO::File
1.15    IO::Pipe
2.12    Mail::Header
1.998   Math::BigInt
0.2603  Math::BigRat
3.13    MIME::Base64
5.509   MIME::Decoder
5.509   MIME::Decoder::UU
5.509   MIME::Head
5.509   MIME::Parser
3.13    MIME::QuotedPrint
5.509   MIME::Tools
0.18    Net::CIDR
1.26    Net::IP
0.19    OLE::Storage_Lite
1.04    Pod::Escapes
3.28    Pod::Simple
1.30    POSIX
1.27    Scalar::Util
2.010   Socket
2.45    Storable
1.5     Sys::Hostname::Long
0.33    Sys::Syslog
1.48    Test::Pod
1.302140        Test::Simple
1.9725  Time::HiRes
1.02    Time::localtime

Optional module versions are:
1.92    Archive::Tar
0.29    bignum
2.06    Business::ISBN
20120719.001    Business::ISBN::Data
1.22    Data::Dump
1.83    DB_File
1.39    DBD::SQLite
1.627   DBI
1.17    Digest
1.03    Digest::HMAC
2.52    Digest::MD5
2.13    Digest::SHA1
1.01    Encode::Detect
0.17020 Error
0.280206        ExtUtils::CBuilder
3.18    ExtUtils::ParseXS
2.4     Getopt::Long
0.53    Inline
1.08    IO::String
1.10    IO::Zlib
2.28    IP::Country
missing Mail::ClamAV
3.004000        Mail::SpamAssassin
v2.008  Mail::SPF
1.999001        Mail::SPF::Query
0.4005  Module::Build
0.21    Net::CIDR::Lite
0.72    Net::DNS
v0.003  Net::DNS::Resolver::Programmable
0.56    Net::LDAP
 4.069  NetAddr::IP
1.967009        Parse::RecDescent
missing SAVI
3.28    Test::Harness
1.23    Test::Manifest
2.02    Text::Balanced
1.60    URI
0.9907  version
0.84    YAML

Denis

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5530 bytes
Desc: not available
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180827/eeab5b1e/attachment.bin>