At 02:19 PM 10/6/2003, Jim Ford wrote:
e been using SA 2.55 for some months now and it's been working so well
that I unsubscribed from the list. However, in the past couple of days the
processing by SA has slowed down such that it halts and the server times
out. It always happens when 'untieing bayes', not as I initially exepected
when accessing network DBs. Here's a typical example:

spamd[2217]: debug: is spam? score=27.9 required=5 tests=BAYES_90,DCC_CHECK,FORGED_MUA_OUTLOOK,HARDCORE_PORN,HOT_NASTY,HTML_60_70,HTML_FONT_BIG,HTML_TAG_BALANCE_TABLE,LIVE_PORN,MIME_HTML_ONLY,OBFUSCATING_COMMENT,RCVD_IN_DSBL,RCVD_IN_OSIRUSOFT_COM,TRACKER_ID,UPPERCASE_50_75
spamd[2217]: logmsg: identified spam (27.9/5.0) for jim:1000 in 33.1 seconds, 1743 bytes.
spamd[2217]: identified spam (27.9/5.0) for jim:1000 in 33.1 seconds, 1743 bytes.
spamd[2217]: debug: bayes: 2217 untie-ing


I've got a pretty slow machine, but it's been OK 'till now.

Any ideas, please?

First, regardless of the bayes-untie issue, the fact that it takes it 33.1 seconds to process a message before it even tries to untie a bayes DB directly implies a timeout. ORBS is a recent RBL casualty, and is probably the cause of delays. Even 2.60 is subject to delays due to this one.



Second, you've got RCVD_IN_OSIRUSOFT in your list of hits. OSIRUSOFT is DEAD and has been returning a hit for every IP in the world for a LONG time. Look in the archives, and find the score-line corrections to remove all the dead RBLs from being run. 2.60 already has these RBLs removed, but 2.55 doesn't.




I'd suggest the following additions to your local.cf to disable the dead RBLs:

score   RCVD_IN_OSIRUSOFT_COM   0
score   X_OSIRU_DUL             0
score   X_OSIRU_DUL_FH          0
score   X_OSIRU_OPEN_RELAY      0
score   X_OSIRU_SPAM_SRC        0
score   X_OSIRU_SPAMWARE_SITE   0
score   RCVD_IN_ORBS            0










------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to