some email not getting scaned

[Christian Motta <ch...@agweb.net>]

I have a user that gets a lot of spam

and sometimes the spam doesn't have any spam-* information written to 
the header.

spamd quits scanning and writes to the log

handled cleanup of child pid 8036

I understand it kills itself for memory mgmt purposes but it does it 
before it writes the header information to the email

is this a bug?

-chris

Re: some email not getting scaned * More Information

[Christian Motta <ch...@agweb.net>]

Follow-up with more info

***Sry if you got this twice - I attached the spam to the last one which 
would triger this email as spam***

logs

Nov 10 18:57:00 localhost sendmail[19433]: jAB2ubrF019433:
from=<Kr...@212.com>, size=12662, class=0, nrcpts=1,
msgid=<18...@huhmail.com>, proto=SMTP, daemon=MTA,
relay=y180204.ppp.dion.ne.jp [219.108.180.204]
Nov 10 18:57:00 localhost sendmail[19433]: jAB2ubrF019433: Milter add:
header: X-Virus-Scanned: ClamAV 0.87.1/1168/Thu Nov 10 10:23:40 2005 on
agwebinc.com
Nov 10 18:57:00 localhost sendmail[19433]: jAB2ubrF019433: Milter add:
header: X-Virus-Status: Clean
Nov 10 18:57:00 localhost spamd[14010]: connection from
localhost.localdomain [127.0.0.1] at port 40590
Nov 10 18:57:00 localhost spamd[14010]: info: setuid to
myuser@domain.com succeeded
Nov 10 18:57:00 localhost spamd[14010]: processing message
<18...@huhmail.com> for myuser@domain.com:622.
Nov 10 18:57:07 localhost spamd[14005]: server hit by SIGCHLD
Nov 10 18:57:07 localhost spamd[14005]: handled cleanup of child pid 14010
Nov 10 18:57:07 localhost spamd[14005]: server successfully spawned
child process, pid 19459
Nov 10 18:57:07 localhost sendmail[19445]: jAB2ubrF019433:
to=<my...@domain.com>, delay=00:00:24, xdelay=00:00:07, mailer=local,
pri=42964, dsn=2.0.0, stat=Sent


spam email header

  From Kris.g@212.com  Thu Nov 10 18:57:00 2005
Return-Path: <Kr...@212.com>
Received: from y180204.ppp.dion.ne.jp (y180204.ppp.dion.ne.jp
[219.108.180.204])
     by agwebinc.com (8.13.4/8.13.4) with SMTP id jAB2ubrF019433
     for <my...@domain.com>; Thu, 10 Nov 2005 18:56:43 -0800
Received: from localhost.localdomain (219.108.180.204 [219.108.180.204])
         by 12.183.180.68 with ESMTP id e92si29[7]qbe.2005.25.64.32.97.74;
         Thu, 10 Nov 2005 18:56:50 -0800
Message-ID: <18...@huhmail.com>
Date: Thu, 10 Nov 2005 18:56:50 -0800
From: "Marguerite Raines" <Kr...@212.com>
X-PGP-Key:
xCR1TUCwnNulvysY4G6B8KeCWribguB5w7Ww494TaDyFDsSoErElPCnSPuD6XDoS==
X-Mime-Key: Base64 (0uOSGfEsuxtXnz4mTtt02twRdRdm)
X-Yahoo-ID: autosuggestible
MIME-Version: 1.0
To: myuser@domain.com
X-Authentication-Warning: localhost.localdomain: apache set sender to
Kris.g@212.com using -f
Subject: sup #04
Content-Type: multipart/related;
  boundary="------------NOaP77813051.PortA"
X-Virus-Scanned: ClamAV 0.87.1/1168/Thu Nov 10 10:23:40 2005 on agwebinc.com
X-Virus-Status: Clean

This is a multi-part message in MIME format.
--------------NOaP77813051.PortA
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit



thx
chris

Christian Motta wrote:

> I have a user that gets a lot of spam
>
> and sometimes the spam doesn't have any spam-* information written to 
> the header.
>
> spamd quits scanning and writes to the log
>
> handled cleanup of child pid 8036
>
> I understand it kills itself for memory mgmt purposes but it does it 
> before it writes the header information to the email
>
> is this a bug?
>
> -chris
>