>On 01/06/2011 09:22 AM, fchan wrote: >> Hello, >> I am recently (within the pass two months) getting alot of these >> from Qmail-Scanner about spamasssin returning invalid content. Below >> is the line from the logs: >> >> Jan 5 10:26:12 s1 X-Qmail-Scanner-2.08st: >> [s1.molsci.org12942517577914364] spamd not returning valid content - >> try again >> >> What is spamassassin sending to Qmail-Scanner that would show as not >> valid content? Or is someone sending stuff to spamassasin to make >> spamassassin send something to Qmail-Scanner to show up with this >> message? >First off, is it actually causing you any problems? This error triggers >a retry, so do such messages get through later? > >They are caused by spamd not returning correct content: Qmail-Scanner >pipes the message to spamc, which pipes it into spamd. spamd is meant to >return an altered version (including X-Spam-Status header), and if >Qmail-Scanner doesn't see such a header, it treats that as a temporary >failure (actually, it tries 3 times before giving up). > >Assuming it works most of the time, the likely issue is a busy spamd >that is timing out once in a while before it can push the results back >to spamc. As long as it doesn't happen too often, it's fine. If it >happens nearly all the time, then you should look to what you can do to >improve spamd: more children/bigger servers/etc > > >-- >Cheers > >Jason Haar >Information Security Manager, Trimble Navigation Ltd. >Phone: +64 3 9635 377 Fax: +64 3 9635 417 >PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 > > >------------------------------------------------------------------------------ >Learn how Oracle Real Application Clusters (RAC) One Node allows customers >to consolidate database storage, standardize their database environment, and, >should the need arise, upgrade to a full multi-node Oracle RAC database >without downtime or disruption >http://p.sf.net/sfu/oracle-sfdevnl >_______________________________________________ >Qmail-scanner-general mailing list >Qmail-scanner-general@lists.sourceforge.net >https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
Thank you for your reply. I noticed when I get spam attack on the mail server once a week for a 24 hour period.for the pass two months and I have set the system so these attacks are mitigated so that we can still send & receive mail but not stopped this attack entirely. I noticed this recently reading the logs (last week) that I'm getting this also from spamd: Jan 5 15:07:40 s1 spamd[21160]: check: exceeded time limit in Mail::SpamAssassin::Plugin::Check::_rawbody_tests_0, skipping further tests I have set --timeout-child=300 but worry if I increase this 5 minute time that spammers will lockup spamd and overloading the server. I also have sent spamassassin mailing list about this issue also. Again thank you, Frank ------------------------------------------------------------------------------ Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
