On Fri, Aug 06, 2004 at 02:16:04PM -0400, Rick Macdougall wrote:There is something wrong with the DNS entries of the domains listed in the sample spam txt file, if you leave it run for about 230 seconds, it will complete eventually.
Errr - an IP address is an IP address. If running the test spam really takes 230 seconds for spamd to process, you have a problem with your SA install.
The timeouts in SA should be such that you never allow any particular e-mail to take more than (say) 10 seconds to process. At 230 seconds, I'd say you're pretty susceptible to a DoS attack...
Hi Jason
An IP is an IP but... I don't know what is going on, I've tested it in three different BOX spamassassin 2.63 and 2.64, and I have always 75 seconds a test and the configure script runs the test twice... Tested in tcp mode and unix-socket mode.
Aug 7 13:23:01 proxy2 spamd[11109]: logmsg: got connection over /var/run/spamd
Aug 7 13:23:01 proxy2 spamd[11109]: got connection over /var/run/spamd
Aug 7 13:23:01 proxy2 spamd[11129]: logmsg: processing message <9PS291LhupY> for root:504.
Aug 7 13:23:01 proxy2 spamd[11129]: processing message <9PS291LhupY> for root:504.
Aug 7 13:23:01 proxy2 spamd[11129]: debug: received-header: parsed as [ ip=193.120.211.219 rdns=mail.webnote.net helo=webnote.net by=mail.netnoteinc.com ident= ]
Aug 7 13:23:02 proxy2 spamd[11129]: debug: received-header: parsed as [ ip=24.226.157.50 rdns=USR-157-050.dr.cgocable.ca helo=netsvr.Internet by=webnote.net ident= ]
Aug 7 13:23:02 proxy2 spamd[11129]: debug: received-header: parsed as [ ip=216.214.106.173 rdns=max1-45.losangeles.corecomm.net helo=R00UqS18S by=netsvr.Internet ident= ]
Aug 7 13:24:17 proxy2 spamd[11129]: debug: received-header: relay 193.120.211.219 trusted? no
Aug 7 13:24:17 proxy2 spamd[11129]: debug: received-header: relay 24.226.157.50 trusted? no
Aug 7 13:24:17 proxy2 spamd[11129]: debug: received-header: relay 216.214.106.173 trusted? no
Aug 7 13:24:17 proxy2 spamd[11129]: debug: is Net::DNS::Resolver available? yes
....skip
Aug 7 13:24:20 proxy2 spamd[11129]: debug: is spam? score=14.654 required=6.5 tests=AWL,BAYES_56,CLICK_BELOW,DATE_IN_FUTURE_03_06,EXCUSE_12,EXCUSE_4,FORGED_YAHOO_RCVD,FOR_FREE,FROM_ENDS_IN_NUMS,FROM_HAS_MIXED_NUMS,INVALID_MSGID,NORMAL_HTTP_TO_IP,NO_REAL_NAME,REMOVE_IN_QUOTES,REMOVE_SUBJ,SELECTED_YOU
Aug 7 13:24:20 proxy2 spamd[11129]: logmsg: identified spam (14.7/6.5) for root:504 in 78.5 seconds, 1544 bytes.
Aug 7 13:24:20 proxy2 spamd[11129]: identified spam (14.7/6.5) for root:504 in 78.5 seconds, 1544 bytes.
As you can see there is a big delay from 13:23:02 to 13:24:17
The average time in this box for spamassassin is 1,9 secs...
Regards
Salvatore
------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
