A good percentage of our emails are not getting evaluated by SA's rules. qmail + qmail-scanner + Spamassassin 3.25 + ClamAV on FreeBSD. Supervised by daemontools.
I've started spamd with debugging on, and tinkered with the various child process values: #exec spamd -D -x -u qscand -H /tmp -s /dev/stderr --min-children=4 --max-children=20 --max-conn-per-child=7 --max-spare=8 In the spamd logs, the failure point seems to be right after the content is parsed and the encoding detected. Immediately after that a properly processed message in my current config should drop right into dns tests, followed the various uri, body, rawbody etc. tests, and so on into bayes and beyond. But about 10-20% of the messages just drop right into a score of 0, with all the tests were being completely bypassed. 2009-01-13 15:36:56.112174500 [97703] dbg: message: ---- MIME PARSER START ---- 2009-01-13 15:36:56.112213500 Tue Jan 13 15:36:56 2009 [97703] dbg: message: ---- MIME PARSER START ---- 2009-01-13 15:36:56.112305500 [97703] dbg: message: parsing normal part 2009-01-13 15:36:56.112343500 Tue Jan 13 15:36:56 2009 [97703] dbg: message: parsing normal part 2009-01-13 15:36:56.112582500 [97703] dbg: message: ---- MIME PARSER END ---- 20092009-01-13 15:36:56.112620500 Tue Jan 13 15:36:56 2009 [97703] dbg: message: ---- MIME PARSER END ---- 2009-01-13 15:36:56.112997500 [97703] dbg: message: no encoding detected 2009-01-13 15:36:56.113040500 Tue Jan 13 15:36:56 2009 [97703] dbg: message: no encoding detected 2009-01-13 15:36:56.113750500 [97703] dbg: check: is spam? score=0 required=4.3 2009-01-13 15:36:56.113801500 Tue Jan 13 15:36:56 2009 [97703] dbg: check: is spam? score=0 required=4.3 2009-01-13 15:36:56.113901500 [97703] dbg: check: tests= 2009-01-13 15:36:56.113935500 Tue Jan 13 15:36:56 2009 [97703] dbg: check: tests= 2009-01-13 15:36:56.114025500 [97703] dbg: check: subtests= 2009-01-13 15:36:56.114060500 Tue Jan 13 15:36:56 2009 [97703] dbg: check: subtests= 2009-01-13 15:36:56.116594500 [97703] info: spamd: clean message (0.0/4.3) for qscand:88 in 0.0 seconds, 2590 bytes. I have even inserted silly rules that match on any character, or the character 'e', etc., but when a message is bypassed, *no* rules are evaluated. Can anyone give me any possible pointers or things to check? I am at my wits' end here...I am happy to post a spamassassin -D --lint if that helps. Thanks - John -- View this message in context: http://www.nabble.com/Spamd-skipping-tests-tp21448225p21448225.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
