Kai Schaetzl wrote:
>
> Jberliner wrote on Wed, 14 Jan 2009 11:34:33 -0800 (PST):
>
>> A couple of things about the non-tagged messages: they usually feature a
>> spoofed sender address identical to the recipient, but not always: so,
>> e.g.
>> From: <m...@mydomain.com> To: m...@mydomain.com. And, in looking at the
>> message
>> headers, a few things are consistently different about the bad messages.
>> I
>> don't know if this is because SA or qmail-scanner rewrite the headers or
>> what...
>
> Good. Seems, the problem is crfeated by specific messages. It's just weird
> that you have such a high percentage of these. Do you reject any mail at
> mTA
> level? I mean, if you don't you get a lot of mail that other people would
> never get and never hit this problem.
>
> I suggest you put up some messages somewhere for download, so others can
> check on their systems. It would probably be helpful if you try to find
> out
> if any of the anomalies are qmail-related. If others can replicate (and
> even
> if not) there might be a bug report due. The problem might not be in SA
> itself, but in some Perl library it depends on, so you should check all
> the
> modules it depends on for the version and try to upgrade.
>
> Kai
>
Knock on wood, I believe this problem is now SOLVED.
As far as I can tell, something was off with my Perl installation, perhaps a
bug in one of the modules or a dependency issue. Anyway, an update from Perl
5.8.8 to 5.8.9 made it into the FreeBSD ports system yesterday, so I
reinstalled Perl and the 1,001 modules used by SA, qmail-scanner, et al.,
and voila -- all messages are now properly getting scanned.
Strangely, I was getting no error messages anywhere. Something was just
silently failing, and as you say, only for certain messages, and very
regularly. Though I'm kind of curious to know what the pattern was, I've
spent so much time trying to debug this that I think at this point I have to
just move on to my "real" work.
It does worry me though, the possibility that the error was/is somewhere in
qmail...though the qmail code has not changed for many years, there are so
many patches required to get a life-with-qmail/qmailrocks style system
together that...well, now that I've got a properly working system, I feel
it's time to move on to postfix!
Thanks.
--
View this message in context:
http://www.nabble.com/Spamd-skipping-tests-tp21448225p21482394.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
