[SA-exim] SA timeout

[Aaron Stromas]

Hi,

All of the sudden I'm getting spam delivered to mailboxes. When I examine
the headers I see SA timeout:

*X-SA-Exim-Connect-IP:* 59.82.130.46
*X-SA-Exim-Mail-From:*
***@wildmail.com<https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com>
*X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after 240
secs
Why would this happen? (Restarting exim does not seem to have helped)
TIA

Regards,

-a

[Bob Amen]

Post by Aaron Stromas
Hi,
All of the sudden I'm getting spam delivered to mailboxes. When I
*X-SA-Exim-Connect-IP:* 59.82.130.46 <http://59.82.130.46>
<https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com>
*X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
240 secs
Why would this happen? (Restarting exim does not seem to have helped)

Check that your spamd is running. You might also want to run
"spamassassin -D --lint" just to make sure everything is OK with your SA
config files.

Cheers,
Bob

[Aaron Stromas]

Post by Aaron Stromas

Post by Aaron Stromas
Hi,
All of the sudden I'm getting spam delivered to mailboxes. When I
*X-SA-Exim-Connect-IP:* 59.82.130.46 <http://59.82.130.46>
<

https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com

Post by Aaron Stromas
*X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
240 secs
Why would this happen? (Restarting exim does not seem to have helped)

Check that your spamd is running. You might also want to run
"spamassassin -D --lint" just to make sure everything is OK with your SA
config files.

Thanks. It's spampd (proxy daemon). It was running.

-a

[David Burton]

Post by Aaron Stromas

Post by Aaron Stromas

Post by Aaron Stromas
Hi,
All of the sudden I'm getting spam delivered to mailboxes. When I
*X-SA-Exim-Connect-IP:* 59.82.130.46 <http://59.82.130.46>
*X-SA-Exim-Mail-From:* Mason.Alford at wildmail.com
<

https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com

Post by Aaron Stromas
*X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
240 secs
Why would this happen? (Restarting exim does not seem to have helped)

Check that your spamd is running. You might also want to run
"spamassassin -D --lint" just to make sure everything is OK with your SA
config files.

Thanks. It's spampd (proxy daemon). It was running.
-a

Did you ever solve this, Aaron?

I also get frequent SA timeouts. The result is that the
spams show up in my mailbox with headers like these:

....
X-SA-Exim-Mail-From: ***@com.mx
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on BurtonSys.com
X-Spam-Report:
* 2.0 MOSTLY_SPAM_TOADDR1 Sent to a burtonsys.com address that gets
* mostly spam
* 0.9 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
* 0.8 INFO_TLD URI: Contains an URL in the INFO top-level domain
* 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.3 HTML_FONT_BIG BODY: HTML tag for a big font size
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?189.155.135.240>]
* 1.1 URIBL_SBL Contains an URL listed in the SBL blocklist
* [URIs: royal-casinos.info]
* 3.6 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
* [URIs: royal-casinos.info]
* 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
* [URIs: royal-casinos.info]
* 3.3 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
* [URIs: royal-casinos.info]
* 3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: royal-casinos.info]
* -2.7 AWL AWL: From: address is in the auto white-list
X-Spam-Status: Yes, score=15.5 required=2.0 tests=AWL,DATE_IN_PAST_12_24,
HTML_FONT_BIG,HTML_MESSAGE,INFO_TLD,MIME_HTML_ONLY,
MOSTLY_SPAM_TOADDR1,RCVD_IN_BL_SPAMCOP_NET,URIBL_AB_SURBL,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
autolearn=disabled version=3.1.5
Subject: [SPAM 15.5] Hi
X-Spam-Prev-Subject: Hi
X-SA-Exim-Version: 4.2.1 (built Mon, 19 Jun 2006 12:05:49 -0400)
X-SA-Exim-Scanned: Yes (on burtonsys.com)
X-SA-Exim-Scanned: No (on burtonsys.com); SA Timed out after 290 secs


The only problem that "spamassassin --lint" reports is:

[31915] warn: config: failed to parse line, skipping: _

(Unfortunately, it doesn't give an indication of WHICH line
it thinks contains a bare underscore. In fact, there is no
such line in local.cf. In fact, the only single-character
lines in local.cf consist of just a single '#' (comment)
character. So I've been ignoring this issue, and I doubt
that it is connected with the SA timeouts.)

Any ideas, anyone?

-Dave
dave123 at burtonsys dot com

[Marc MERLIN]

Post by David Burton

Post by Aaron Stromas

Post by Aaron Stromas

Post by Aaron Stromas
Hi,
All of the sudden I'm getting spam delivered to mailboxes. When I
*X-SA-Exim-Connect-IP:* 59.82.130.46 <http://59.82.130.46>
*X-SA-Exim-Mail-From:* Mason.Alford at wildmail.com
<

https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com

Post by Aaron Stromas
*X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
240 secs
Why would this happen? (Restarting exim does not seem to have helped)

Check that your spamd is running. You might also want to run
"spamassassin -D --lint" just to make sure everything is OK with your SA
config files.

Thanks. It's spampd (proxy daemon). It was running.
-a

Did you ever solve this, Aaron?

I used to have time logging information in spamassassin so you could find
out after the fact why it SA would ever take more than 4mn. Unfortunately,
some of that code was removed from more recent SAs, but you should still be
able to find why SA is taking so long by feeding the message from the
command line while being in debug mode.

Either way, this is most likely a problem just with SA, not with Exim or
SA-Exim.

Post by David Burton
I also get frequent SA timeouts. The result is that the
....
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on BurtonSys.com
* 2.0 MOSTLY_SPAM_TOADDR1 Sent to a burtonsys.com address that gets
* mostly spam
* 0.9 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
* 0.8 INFO_TLD URI: Contains an URL in the INFO top-level domain
* 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.3 HTML_FONT_BIG BODY: HTML tag for a big font size
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?189.155.135.240>]
* 1.1 URIBL_SBL Contains an URL listed in the SBL blocklist
* [URIs: royal-casinos.info]
* 3.6 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
* [URIs: royal-casinos.info]
* 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
* [URIs: royal-casinos.info]
* 3.3 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
* [URIs: royal-casinos.info]
* 3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: royal-casinos.info]
* -2.7 AWL AWL: From: address is in the auto white-list
X-Spam-Status: Yes, score=15.5 required=2.0 tests=AWL,DATE_IN_PAST_12_24,
HTML_FONT_BIG,HTML_MESSAGE,INFO_TLD,MIME_HTML_ONLY,
MOSTLY_SPAM_TOADDR1,RCVD_IN_BL_SPAMCOP_NET,URIBL_AB_SURBL,
URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
autolearn=disabled version=3.1.5
Subject: [SPAM 15.5] Hi
X-Spam-Prev-Subject: Hi
X-SA-Exim-Version: 4.2.1 (built Mon, 19 Jun 2006 12:05:49 -0400)
X-SA-Exim-Scanned: Yes (on burtonsys.com)
X-SA-Exim-Scanned: No (on burtonsys.com); SA Timed out after 290 secs
[31915] warn: config: failed to parse line, skipping: _
(Unfortunately, it doesn't give an indication of WHICH line
it thinks contains a bare underscore. In fact, there is no
such line in local.cf. In fact, the only single-character
lines in local.cf consist of just a single '#' (comment)
character. So I've been ignoring this issue, and I doubt
that it is connected with the SA timeouts.)
Any ideas, anyone?
-Dave
dave123 at burtonsys dot com
_______________________________________________
SA-Exim mailing list
http://lists.merlins.org/lists/listinfo/sa-exim

[Jonathan Armitage]

Post by Aaron Stromas
Hi,
*X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
240 secs
Why would this happen? (Restarting exim does not seem to have helped)

I had this issue some months ago, and eventually decided that, at busy
times, too many spamd daemons were running simultaneously, resulting in
them swapping.

I limited the number of daemons that could run simultaneously with
--max-children, which helped.

Jon

[Mark Zbikowski]

Using sa-exim, is it possible to make spamd process individual
$HOME/.spamassassin/user_prefs? I haven't been able to figure it out.

On Debian, spamd always seems to use "Debian-exim" as the user, for
example:

Feb 4 10:34:33 mx2 spamd[14677]: spamd: setuid to Debian-exim
succeeded
Feb 4 10:34:33 mx2 spamd[14677]: info: user has changed
Feb 4 10:34:33 mx2 spamd[14677]: config: using
"/var/spool/exim4/.spamassassin" for user state dir

So it always process the same user state dir. I assume this is because
sa-exim always passes "Debian-exim" as the uid.

I would like spamd to process per-user configuration files.

My versions:
exim4:
Installed: 4.50-8sarge2
exim4-daemon-heavy:
Installed: 4.63-12
spamassassin:
Installed: 3.1.7-1

Any thoughts?

Mark Z

[Marc MERLIN]

Post by Mark Zbikowski
Using sa-exim, is it possible to make spamd process individual
$HOME/.spamassassin/user_prefs? I haven't been able to figure it out.

It's an FAQ and in a word, no.
SA-Exim can receive a message on behalf of 5 or 10 users at the same time, and can't
apply multiple preferences without playing tricks like temporarily
rejecting all the users except a few with the same config, and wait for
the mail to come back for the other users, and keep going.

It's kind of messy to implement for many different reasons and not super
reliable in some cases, so no one has implemented this yet, and I'm not
sure anyone will (that said, I've been wrong before)

Hope this helps.
Marc

[Mark Zbikowski]

Knowing is half the battle.

Well in this case, I guess it's the entire battle.

Thanks Marc!

Mark

-----Original Message-----
From: Marc MERLIN [mailto:***@merlins.org]
Sent: Tuesday, February 06, 2007 4:13 PM
To: Mark Zbikowski
Cc: sa-***@lists.merlins.org
Subject: Re: [SA-exim] Can spamd process per-user user_prefs?

Post by Mark Zbikowski
Using sa-exim, is it possible to make spamd process individual
$HOME/.spamassassin/user_prefs? I haven't been able to figure it out.

It's an FAQ and in a word, no.
SA-Exim can receive a message on behalf of 5 or 10 users at the same
time, and can't
apply multiple preferences without playing tricks like temporarily
rejecting all the users except a few with the same config, and wait for
the mail to come back for the other users, and keep going.

It's kind of messy to implement for many different reasons and not super
reliable in some cases, so no one has implemented this yet, and I'm not
sure anyone will (that said, I've been wrong before)

Hope this helps.
Marc