What is causing this delay?

Tue Aug 28 12:39:33 UTC 2018

Hello Jerry,

Installed one but it didn't do any good:
08:35:02: Checking for SpamAssassin errors (if you use it)...
08:35:02: Using SpamAssassin results cache
08:35:02: Connected to SpamAssassin cache database
08:35:12: SpamAssassin reported no errors.
08:35:12: Connected to Processing Attempts Database

dig www.apache.org returns:
;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Aug 28 08:36:12 EDT 2018
;; MSG SIZE  rcvd: 376

Any other suggestions ?

Denis

-----Message d'origine-----
De : MailScanner <mailscanner-bounces+denis.beauchemin=usherbrooke.ca at lists.mailscanner.info> De la part de Jerry Benton
Envoyé : 27 août 2018 23:27
À : 'MailScanner Discussion' <mailscanner at lists.mailscanner.info>
Objet : RE: What is causing this delay?

Setup a caching DNS server on the same box and you should see those numbers drop from 10 seconds to about 2 seconds or less. Just finished testing this in the lab. 

--
Jerry Benton
www.mailborder.com
+1   (843) 800-8605
+44 (020) 3883-8605

-----Original Message-----
From: MailScanner <mailscanner-bounces+jerry.benton=mailborder.com at lists.mailscanner.info> On Behalf Of Denis Beauchemin
Sent: Monday, August 27, 2018 09:30
To: mailscanner at lists.mailscanner.info
Subject: What is causing this delay?

Hello all,

After many years away from MailScanner I installed new MS servers a couple of weeks ago. I’m happy to see that MS has continued to thrive!

Now my problem: my 2 new servers are running into some timeout during messages scan as can be seen here:
[root at smtpi3 conf.d]# MailScanner --lint 2>&1 | while true; do read l; echo "$(date +%T): $l";done
08:01:56: Trying to setlogsock(unix)
08:01:56:
08:01:56: Reading configuration file /etc/MailScanner/MailScanner.conf
08:01:56: Reading configuration file /etc/MailScanner/conf.d/README
08:01:56: Reading configuration file /etc/MailScanner/conf.d/UdeS.conf
08:01:56: Read 1500 hostnames from the phishing whitelist
08:01:56: Read 17028 hostnames from the phishing blacklists
08:01:56:
08:01:56: Checking version numbers...
08:01:56: Version number in MailScanner.conf (5.0.7) is correct.
08:01:56:
08:01:56: Your envelope_sender_header in spamassassin.conf is correct.
08:01:56:
08:01:56: Checking for SpamAssassin errors (if you use it)...
08:01:56: Using SpamAssassin results cache
08:01:56: Connected to SpamAssassin cache database
08:02:14: SpamAssassin reported no errors.
08:02:14: Connected to Processing Attempts Database
08:02:14: Created Processing Attempts Database successfully
08:02:14: There is 1 message in the Processing Attempts Database
08:02:14: Using locktype = posix
08:02:14: MailScanner.conf says "Virus Scanners = clamd"
08:02:14: Found these virus scanners installed: clamd
08:02:14: ===========================================================================
08:02:14: Filename Checks: Windows/DOS Executable (1 eicar.com)
08:02:14: Other Checks: Found 1 problems
08:02:14: Virus and Content Scanning: Starting
08:02:14: Clamd::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
08:02:14: Virus Scanning: Clamd found 1 infections
08:02:14: Infected message 1 came from 10.1.1.1
08:02:14: Virus Scanning: Found 1 viruses
08:02:14: ===========================================================================
08:02:14: Virus Scanner test reports:
08:02:14: Clamd said "eicar.com was infected: Eicar-Test-Signature"
08:02:14:
08:02:14: If any of your virus scanners (clamd)
08:02:14: are not listed there, you should check that they are installed correctly
08:02:14: and that MailScanner is finding them correctly via its virus.scanners.conf.

If you look at the timestamps between "Connected to SpamAssassin cache database" and "SpamAssassin reported no errors", you'll see a 18 seconds delay, which seems excessive. I've redone this many times and it never goes lower than 10 seconds.

If I do a "MailScanner --debug-sa" I get the following delays:
In Debugging mode, not forking...
Trying to setlogsock(unix)
08:18:36 Aug 24 08:18:36.710 [10096] dbg: logger: adding facilities: all ...
08:18:37 Aug 24 08:18:37.643 [10096] dbg: rules: run_eval_tests - compiling eval code: 13, priority 0
08:18:37 Aug 24 08:18:37.644 [10096] dbg: dns: entering helper-app run mode
08:18:42 Aug 24 08:18:42.645 [10096] dbg: dns: leaving helper-app run mode ...
08:18:42 Building a message batch to scan...
08:19:36 Have a batch of 1 message.
08:19:36 Stopping now as you are debugging me.

I tried to look at the dns settings but couldn't figure out what might be off. I am not running a caching nameserver. My old MS servers are not either and do not show this delay.

Thanks for you help.

I'm running this version:
[root at smtpi3 conf.d]# MailScanner -v
Running on
Linux smtpi3.usherbrooke.ca 3.10.0-862.11.6.el7.x86_64 #1 SMP Fri Aug 10 16:55:11 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux This is Red Hat Enterprise Linux Server release 7.5 (Maipo) This is Perl version 5.016003 (5.16.3)

This is MailScanner version 5.0.7
Module versions are:
1.01    AnyDBM_File
1.30    Archive::Zip
0.29    bignum
1.26    Carp
2.061   Compress::Zlib
1.119   Convert::BinHex
0.18    Convert::TNEF
2.145   Data::Dumper
2.30    Date::Parse
1.04    DirHandle
1.11    Fcntl
2.84    File::Basename
2.23    File::Copy
2.02    FileHandle
2.09    File::Path
0.2301  File::Temp
0.92    Filesys::Df
3.69    HTML::Entities
3.71    HTML::Parser
3.69    HTML::TokeParser
1.16    IO::File
1.15    IO::Pipe
2.12    Mail::Header
1.998   Math::BigInt
0.2603  Math::BigRat
3.13    MIME::Base64
5.509   MIME::Decoder
5.509   MIME::Decoder::UU
5.509   MIME::Head
5.509   MIME::Parser
3.13    MIME::QuotedPrint
5.509   MIME::Tools
0.18    Net::CIDR
1.26    Net::IP
0.19    OLE::Storage_Lite
1.04    Pod::Escapes
3.28    Pod::Simple
1.30    POSIX
1.27    Scalar::Util
2.010   Socket
2.45    Storable
1.5     Sys::Hostname::Long
0.33    Sys::Syslog
1.48    Test::Pod
1.302140        Test::Simple
1.9725  Time::HiRes
1.02    Time::localtime

Optional module versions are:
1.92    Archive::Tar
0.29    bignum
2.06    Business::ISBN
20120719.001    Business::ISBN::Data
1.22    Data::Dump
1.83    DB_File
1.39    DBD::SQLite
1.627   DBI
1.17    Digest
1.03    Digest::HMAC
2.52    Digest::MD5
2.13    Digest::SHA1
1.01    Encode::Detect
0.17020 Error
0.280206        ExtUtils::CBuilder
3.18    ExtUtils::ParseXS
2.4     Getopt::Long
0.53    Inline
1.08    IO::String
1.10    IO::Zlib
2.28    IP::Country
missing Mail::ClamAV
3.004000        Mail::SpamAssassin
v2.008  Mail::SPF
1.999001        Mail::SPF::Query
0.4005  Module::Build
0.21    Net::CIDR::Lite
0.72    Net::DNS
v0.003  Net::DNS::Resolver::Programmable
0.56    Net::LDAP
 4.069  NetAddr::IP
1.967009        Parse::RecDescent
missing SAVI
3.28    Test::Harness
1.23    Test::Manifest
2.02    Text::Balanced
1.60    URI
0.9907  version
0.84    YAML

Denis

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner