Hi Jason,

Thanks for this, I'm presuming I should be reading
http://qmail-scanner.sourceforge.net/FAQ.php. Any ideas how I can find out
if
Spamd is hanging on DNS? My SA is running on Fedora Core 5 OS.
I will also be looking at updating qmail-scanner.

Many thanks for your input. 

Cheers

Keith 

-----Original Message-----
From: Jason Haar [mailto:[EMAIL PROTECTED] 
Sent: 03 May 2007 00:31
To: [email protected]
Subject: Re: SA Not Scoring

Keith De Souza wrote:
>
>  
>
>  
>
> Sat, 28 Apr 2007 19:42:53 BST:21005: SA: required_hits ? /
> sa_quarantine +0.01 / sa_delete +2.4
>
> Sat, 28 Apr 2007 19:42:53 BST:21005: SA: finished scan of dir
> "/var/spool/qmailscan/tmp/ssdd117778517072221005" in 600.013176 secs
>
>  - hits=?/?
>
> Sat, 28 Apr 2007 19:42:53 BST:21005: qmail-scanner:
> Clear:RC:0(67.186.37.67):SA:0(?/?): 602.343095      3106   
> overtaxingpinafore
>
> @internetdynamics.com [EMAIL PROTECTED]   Re:    
> <[EMAIL PROTECTED]> textfile0:46
>
>  textfile1:468 textfile2:1145
>
>  
>
>  
>
> This does not happen all the time but once in a while my log show a
> batch of mail not being scanned and producing false negatives, I don't
> know why that is.
>
>  
>
> Is there any possibility that my server is overloaded and spamd is
> unable to spawn sufficient child process to handle the incoming mail.
> Just a logical guess.
>
>  
>
Did you read the Qmail-Scanner FAQ - Q19?

Look at the timestamp in there - 602 seconds. That means that message
took 10 minutes to process - something is wrong with your system. Either
it is overloaded or spamd is hanging on DNS (or other network) lookups.
However, you say this only happens every once in a while - in which case
that may be acceptable to you.

Also "/var/spool/qmailscan" implies you're using a VERY old Q-S 1.X
release...

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



Reply via email to