On Wed, 3 Jun 2009, Luis campo wrote:

this is an example of var / log / qmail / spamd

2009-06-03 12:00:16.531889500 [19168] info: prefork: child states: BBBBBBBBBB
2009-06-03 12:00:16.531949500 [19168] info: prefork: server reached 
--max-children setting, consider raising it

There is a problem. You're overloaded. I don't know if spamd being overloaded would result in spamc reporting interrupted system calls, but that would explain the behaviour you are seeing:

The problem is that spam works a few minutes then let it pass all messages giving a score of 0.00 in the log

From the spamc man page:

  -t timeout, --timeout=timeout
    Set the timeout for spamc-to-spamd communications (default: 600, 0
    disables).  If spamd takes longer than this many seconds to reply to
    a message, spamc will abort the connection and treat this as a
    failure to connect; in other words the message will be returned
    unprocessed.

"unprocessed" == "score of zero".

You might try using spamc's "-x" option, which will tell qmail that spamd is overloaded rather than skipping the scan. I don't know how simscan will respond, but it's likely the messages would be queued for retry. Messages would take longer to be delivered, but they would all be scanned.

you said we have 3 mx with each SA, which work well only 2 and 3 is where the error comes, If influence on our server reaches around 75,000 emails received daily.

You may want to add memory and increase the number of child processes.

Are you using any DNSBLs to reduce load within qmail at SMTP time, before the messages get passed off to SA for scoring?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Our government should bear in mind the fact that the American
  Revolution was touched off by the then-current government
  attempting to confiscate firearms from the people.
-----------------------------------------------------------------------
 3 days until the 65th anniversary of D-Day

Reply via email to