Turns out I sent this email too soon. Even though I have use_pyzor 0
in my local.cf, having these lines in v310.pre uncommented was causing
the 5 seconds extra scan time:
loadplugin Mail::SpamAssassin::Plugin::Pyzor
loadplugin Mail::SpamAssassin::Plugin::Razor2
On Tue, Aug 31, 2010 at 10:51 AM
I'm running SpamAssassin v3.3.1. A message with 500 lines of text
(22k) is taking 6-7 seconds.
This is using spamc. I am using a Bayes DB (no auto expire/learn)
that's stored in SQL. User preferences are also stored in SQL. I
have skip_rbl_checks on. I am using only the official rules from
up
So... They fabricated a mail with a fake mailer, added some fake
double-bounce headers, and then sent it to your postmaster account? That
seems exceptionally unclever of some idiot.
I just ran that twice here on an unloaded system and it took about 6.5
seconds. Only net rule it hit was spam
http://www3.2cah.com/spam/sa_slowhtml.txt
I got inundated with messages similar to this today. The average scan
time here for these is 25+ seconds when the box is under _low_ load.
My guess is that it has to do with the number of URLs.
Any thoughts on this?
--
Craig
