First thanks for helping get the logging corrected and the daeomizing set with -d.
Working on getting SA 3.1 working effectively here and I think I may have some issues with it at this time in terms of it scanning all incoming mail. I'm running exim 3.36 here and have 4.60 ready to go if I can get a good SA 3.1 and Sophos ACL for it. My old SA 3.0.4 didn't seem to miss anything or generate this type of error logging at least. I'm watching my logs and it seems that spamd is having issues with errors or possibly skipping messages. Command line is: /usr/local/bin/spamd -d -u spamd --m 10 --max-conn-per-child=50 Log snippets etc. in attachment as the spam filter killed my first attempt...and now my second as an attachment so I'll just include the log here as the headers seenm to get clobberred. If anyone wants to see them I can email them directly. Jan 9 15:29:07 eagle spamd[8481]: spamd: processing message <[EMAIL PROTECTED]> for mail:561 Jan 9 15:29:07 eagle spamd[8311]: prefork: child states: BBB Jan 9 15:29:07 eagle spamd[8311]: spamd: server successfully spawned child process, pid 8482 Jan 9 15:29:07 eagle spamd[8311]: prefork: child states: BBBI Jan 9 15:29:07 eagle spamd[8420]: spamd: connection from localhost [127.0.0.1] at port 37261 Jan 9 15:29:08 eagle spamd[8420]: spamd: processing message <[EMAIL PROTECTED]> for mail:561 Jan 9 15:29:10 eagle spamd[8311]: prefork: child states: IBBI Jan 9 15:29:14 eagle spamd[8419]: spamd: connection from localhost [127.0.0.1] at port 37271 Jan 9 15:29:15 eagle spamd[8419]: spamd: processing message <[EMAIL PROTECTED]> for mail:561 Jan 9 15:30:06 eagle spamd[8481]: spamd: identified spam (30.6/5.0) for mail:561 in 58.8 seconds, 805 bytes. Jan 9 15:30:06 eagle spamd[8481]: spamd: result: Y 30 - FORGED_HOTMAIL_RCVD2,FUZZY_PRICES,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,SARE_OBFU_ONLINE,SARE_OBFU_PART_ICE,SARE_OBFU_PART_ING,SARE_OBFU_PRICE2,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,WLS_URI_OPT_632 scantime=58.8,size=805,user=mail,uid=561,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37266,mid=<[EMAIL PROTECTED]>,autolearn=disabled Jan 9 15:30:42 eagle spamd[8420]: spamd: clean message (1.2/5.0) for mail:561 in 87.4 seconds, 3750 bytes. Jan 9 15:30:42 eagle spamd[8420]: spamd: result: . 1 - BLANK_LINES_70_80 scantime=87.4,size=3750,user=mail,uid=561,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37261,mid=<[EMAIL PROTECTED]>,autolearn=disabled Jan 9 15:30:42 eagle spamd[8419]: spamd: identified spam (33.7/5.0) for mail:561 in 86.8 seconds, 14732 bytes. Jan 9 15:30:43 eagle spamd[8419]: spamd: result: Y 33 - DATE_IN_PAST_96_XX,DCC_CHECK,HTML_MESSAGE,HTML_TAG_EXIST_TBODY,RM_bpoem_InstantDL,SARE_OBFU_PART_ICE,SARE_OBFU_PRICE2,SARE_OEM_AND_OTHER,SARE_OEM_A_1,SARE_OEM_NEW_TITLES,SARE_OEM_PRODS_1,SARE_OEM_PRODS_FEW,SARE_OEM_S_PRICE,SARE_OEM_UPPER_EYE,SARE_PRODS_LOTS,SARE_PRODUCTS_02,SARE_PRODUCTS_03,SARE_PRODUCTS_04,URIBL_JP_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,WLS_URI_OPT_2170 scantime=86.8,size=14732,user=mail,uid=561,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=37271,mid=<[EMAIL PROTECTED]>,autolearn=disabled Jan 9 15:30:43 eagle spamd[8311]: prefork: child states: BIBI Jan 9 15:30:44 eagle spamd[8311]: prefork: child states: IIBI Jan 9 15:30:44 eagle spamd[8311]: spamd: handled cleanup of child pid 8482 due to SIGCHLD Jan 9 15:30:44 eagle spamd[8311]: prefork: child states: IIB Jan 9 15:30:57 eagle spamd[8481]: __alarm__ Jan 9 15:30:57 eagle spamd[8481]: __alarm__ Jan 9 15:30:58 eagle spamd[8311]: prefork: child states: III Jan 9 15:30:59 eagle spamd[8311]: spamd: handled cleanup of child pid 8481 due to SIGCHLD Jan 9 15:30:59 eagle spamd[8311]: prefork: child states: IIK Jan 9 15:31:06 eagle spamd[8419]: spamd: connection from localhost [127.0.0.1] at port 54409 Jan 9 15:31:06 eagle spamd[8419]: spamd: processing message <[EMAIL PROTECTED]> for mail:561 Jan 9 15:31:07 eagle spamd[8420]: spamd: connection from localhost [127.0.0.1] at port 54410 Jan 9 15:31:07 eagle spamd[8420]: spamd: processing message <[EMAIL PROTECTED]> for mail:561 Jan 9 15:34:55 eagle spamd[8715]: __alarm__ Jan 9 15:35:01 eagle spamd[8715]: __alarm__ Jan 9 15:35:01 eagle spamd[8311]: prefork: child states: BBBIB Jan 9 15:35:02 eagle spamd[8719]: spamd: processing message <[EMAIL PROTECTED]> for mail:561 Jan 9 15:35:12 eagle spamd[8311]: tcp timeout at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 195. Jan 9 15:35:12 eagle spamd[8311]: tcp timeout at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 195. Jan 9 15:35:12 eagle spamd[8311]: prefork: select returned undef! recovering Jan 9 15:35:48 eagle spamd[8712]: spamd: clean message (0.0/5.0) for mail:561 in 186.2 seconds, 14503 bytes. Jan 9 15:35:48 eagle spamd[8712]: spamd: result: . 0 - HTML_MESSAGE scantime=186.2,size=14503,user=mail,uid=561,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=54421,mid=<[EMAIL PROTECTED]>,autolearn=disabled Mail headers of what I would think would be spam but doesn't appear to get tested or flagged: ===[George R. Kasica]=== +1 262 677 0766 President +1 206 374 6482 FAX Netwrx Consulting Inc. Jackson, WI USA http://www.netwrx1.com [EMAIL PROTECTED] ICQ #12862186
