Please, resist the urge to top post and including unnecessary full
quotes. This also makes answering questions much easier...
On Fri, 2008-02-08 at 16:45 -0800, fchan wrote:
> Thank you. I have check my DNS and it appears to resolve the link
> correctly.
What link? The spample does not show any. Also, the DNS queries relevant
for SA are those to the various blacklists. By default including URI as
well as IP blacklists.
Anyway, you can't prove the non-existence of a DNS issue, by one
successful query. So we now know that it works at least sometimes. Good,
we pretty much knew that before. ;)
> It is just annoying, I think less than 1% of all messages,
> are getting this and I'm checking if there is something I can do to
> solve this.
> Here is a sample message that is causing this:
The sample is incomplete...
> Received: (qmail 7689 invoked by uid 501); 8 Feb 2008 01:58:00 -0800
> Received: from 87.18.202.233 by s1.molsci.org (envelope-from
> <[EMAIL PROTECTED]>, uid 509) with
> qmail-scanner-2.01st
> (clamdscan: 0.92/5545. spamassassin: 3.2.4. perlscan: 2.01st.
> Clear:RC:0(87.18.202.233):SA:0(?/?):.
> Processed in 50.059824 secs); 08 Feb 2008 09:58:00 -0000
> X-Spam-Status: No, hits=? required=?
Did you try asking qmail-scanner folks already? That is not the default
SA header.
[ snip ]
> Another thing is when I do a sa-learn --spam of this message I get
> this message "Learned tokens from 0 message(s) (1 message(s)
> examined)". Why I cannot get sa-learn to learn from this message also.
Because it has been (auto?) learned before?
> > > Wed, 06 Feb 2008 09:16:41 PST:18972: clamdscan: finished scan in
> > 0.011407 secs
> > > Wed, 06 Feb 2008 09:17:26 PST:18972: SA: finished scan in 45.026522
> > > secs - hits=?/?
> >
> >Does that mean qmail-scanner forced further processing due to the
> >timeout, without actually waiting for SA to finish? (Despite the success
> >suggesting phrase...)
So? Hey, I'm not a qmail-scanner guy, that was not meant as a
rhetorical question. ;)
> >> Wed, 06 Feb 2008 09:17:26 PST:18972: p_s: finished scan in 0.020737 secs
> >> Wed, 06 Feb 2008 09:17:26 PST:18972: ini_sc: finished scan of
> >> "/var/spool/qmailscan/tmp/s1.molsci.org120231820076418972"
> >>
> >> I have set timeout on qmailscanner for spamc to 45 seconds. Why are,
> >> what I guess, links causing this.
> >
> >Are you positive this is related to links? SA queries URI blacklists.
> >Is it possible you have a DNS issue by any chance?
Now, are you really positive about that, or not?
guenther
--
char *t="[EMAIL PROTECTED]";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
