You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by fchan <fc...@molsci.org> on 2008/01/12 03:19:54 UTC

I'm still getting question marks in spam scores.

Hi,
I updated from spamassassin 3.2.3 to 3.2.4 and I'm still getting 
these question marks in score from spamassassin.
Here is a sample of the header I get with this message:

Return-Path: <ha...@petzisound.de>
Delivered-To: fchan@molsci.org
Received: (qmail 23882 invoked by uid 501); 11 Jan 2008 03:03:53 -0800
Received: from 222.165.93.206 by s1.molsci.org (envelope-from 
<ha...@petzisound.de>, uid 509) with qmail-scanner-2.01st
      (clamdscan: 0.91.2/4787. spamassassin: 3.2.3. perlscan: 2.01st.
      Clear:RC:0(222.165.93.206):SA:0(?/?):.
      Processed in 30.084638 secs); 11 Jan 2008 11:03:53 -0000
X-Spam-Status: No, hits=? required=?
Received: from unknown (HELO compaq) (222.165.93.206)
      by mail.molsci.org with SMTP; 11 Jan 2008 03:03:21 -0800
Received: from [222.165.93.206] by mailin.rzone.de; Fri, 10 Jan 2008 
03:03:31 -0800
Date: Fri, 10 Jan 2008 03:03:31 -0800
From: "Nancy Andersen" <ha...@petzisound.de>
X-Mailer: The Bat! (v2.11) Educational
Reply-To: haqpetzisounddyb@petzisound.de
X-Priority: 3 (Normal)
Message-ID: <39...@petzisound.de>
To: fchan@molsci.org
Subject: Olny this 5 days special price on pharma for you dear customer
MIME-Version: 1.0
Content-Type: multipart/alternative;
      boundary="----------F46E35D35D3C25"

Here is what I see in qmail-queue.log:
Fri, 11 Jan 2008 03:03:22 PST:23794: +++ starting debugging for 
process 23794 (ppid=23314) by uid=509
Fri, 11 Jan 2008 03:03:22 PST:23795: +++ starting debugging for 
process 23795 (ppid=23315) by uid=509
Fri, 11 Jan 2008 03:03:22 PST:23794: w_c: Total time between DATA 
command and "." was 0.000114 secs
Fri, 11 Jan 2008 03:03:22 PST:23794: w_c: elapsed time from start 0.000114 secs
Fri, 11 Jan 2008 03:03:22 PST:23794: g_e_h: 
return-path='haqpetzisounddyb@petzisound.de', 
recips='fchan@molsci.org,fu@molsci.org,ghv@molsci.org,gilmore@molsci.org,gmikawa@molsci.org,gonzales@molsci.org,gordon@molsci.org,gpesce@molsci.org,gregorytftlee@molsci.org,guarino@molsci.org,gurdeep@molsci.org'
Fri, 11 Jan 2008 03:03:22 PST:23794: from='"Nancy Andersen" 
<ha...@petzisound.de>', subj='Olny this 5 days special 
price on pharma for you dear customer', via SMTP from 222.165.93.206
Fri, 11 Jan 2008 03:03:22 PST:23794: clamdscan: finished scan in 0.020176 secs

Here is the maillog:
Jan 11 03:03:23 s1 spamd[17667]: spamd: checking message 
<39...@petzisound.de> for qscand:510Jan 11 
03:03:23 s1 spamd[23593]: spamd: connection from 
localhost.localdomain [127.0.0.1] at port 37676
Jan 11 03:04:37 s1 spamd[17667]: spamd: identified spam (21.0/10.0) 
for qscand:510 in 74.4 seconds, 1894 bytes. Jan 11 03:04:37 s1 
spamd[17667]: spamd: result: Y 20 - 
BAYES_99,BOTNET,DATE_IN_PAST_12_24,HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE,URIBL_BLACK,URIBL_JP_SURBL,URIBL_SBL 
scantime=74.4,size=1894,user=qscand,uid=510,required_score=10.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37675,mid=<39...@petzisound.de>,bayes=0.999974,autolearn=spam 
Jan 11 03:04:37 s1 spamd[26231]: prefork: child states: III Jan 11 
03:04:37 s1 spamd[26231]: spamd: handled cleanup of child pid 23593 
due to SIGCHLD  Jan 11 03:04:37 s1 spamd[26231]: prefork: child 
states: II

Is it because that spamassassin is taking a such a long time and 
timing out so I'm getting these question mark in scores? How do I 
adjust the timeout?

Thank you for any assistance,
Frank

Re: I'm still getting question marks in spam scores.

Posted by Matt Kettler <mk...@verizon.net>.
fchan wrote:
> Hi,
> I updated from spamassassin 3.2.3 to 3.2.4 and I'm still getting these 
> question marks in score from spamassassin.
> Here is a sample of the header I get with this message:
>
> Return-Path: <ha...@petzisound.de>
> Delivered-To: fchan@molsci.org
> Received: (qmail 23882 invoked by uid 501); 11 Jan 2008 03:03:53 -0800
> Received: from 222.165.93.206 by s1.molsci.org (envelope-from 
> <ha...@petzisound.de>, uid 509) with qmail-scanner-2.01st
>      (clamdscan: 0.91.2/4787. spamassassin: 3.2.3. perlscan: 2.01st.
>      Clear:RC:0(222.165.93.206):SA:0(?/?):.
>      Processed in 30.084638 secs); 11 Jan 2008 11:03:53 -0000
> X-Spam-Status: No, hits=? required=?
>
<snip>
> Here is what I see in qmail-queue.log:
> Fri, 11 Jan 2008 03:03:22 PST:23794: +++ starting debugging for 
> process 23794 (ppid=23314) by uid=509
> Fri, 11 Jan 2008 03:03:22 PST:23795: +++ starting debugging for 
> process 23795 (ppid=23315) by uid=509
> Fri, 11 Jan 2008 03:03:22 PST:23794: w_c: Total time between DATA 
> command and "." was 0.000114 secs
> Fri, 11 Jan 2008 03:03:22 PST:23794: w_c: elapsed time from start 
> 0.000114 secs
> Fri, 11 Jan 2008 03:03:22 PST:23794: g_e_h: 
> return-path='haqpetzisounddyb@petzisound.de', 
> recips='fchan@molsci.org,fu@molsci.org,ghv@molsci.org,gilmore@molsci.org,gmikawa@molsci.org,gonzales@molsci.org,gordon@molsci.org,gpesce@molsci.org,gregorytftlee@molsci.org,guarino@molsci.org,gurdeep@molsci.org' 
>
> Fri, 11 Jan 2008 03:03:22 PST:23794: from='"Nancy Andersen" 
> <ha...@petzisound.de>', subj='Olny this 5 days special 
> price on pharma for you dear customer', via SMTP from 222.165.93.206
> Fri, 11 Jan 2008 03:03:22 PST:23794: clamdscan: finished scan in 
> 0.020176 secs
>
> Here is the maillog:
> Jan 11 03:03:23 s1 spamd[17667]: spamd: checking message 
> <39...@petzisound.de> for qscand:510Jan 11 03:03:23 
> s1 spamd[23593]: spamd: connection from localhost.localdomain 
> [127.0.0.1] at port 37676
> Jan 11 03:04:37 s1 spamd[17667]: spamd: identified spam (21.0/10.0) 
> for qscand:510 in 74.4 seconds, 1894 bytes. Jan 11 03:04:37 s1 
> spamd[17667]: spamd: result: Y 20 - 
> BAYES_99,BOTNET,DATE_IN_PAST_12_24,HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_NONE,URIBL_BLACK,URIBL_JP_SURBL,URIBL_SBL 
> scantime=74.4,size=1894,user=qscand,uid=510,required_score=10.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37675,mid=<39...@petzisound.de>,bayes=0.999974,autolearn=spam 
> Jan 11 03:04:37 s1 spamd[26231]: prefork: child states: III Jan 11 
> 03:04:37 s1 spamd[26231]: spamd: handled cleanup of child pid 23593 
> due to SIGCHLD  Jan 11 03:04:37 s1 spamd[26231]: prefork: child 
> states: II
>
> Is it because that spamassassin is taking a such a long time and 
> timing out so I'm getting these question mark in scores? How do I 
> adjust the timeout?

Well, that's a qmail-scanner question really..
However a quick search on google for qmail-scanner tiemout turns up:

http://www.mail-archive.com/qmail-scanner-general@lists.sourceforge.net/msg06929.html

Apparently qmail-scanner by default calls spamc with an absurdly short 
30 second timeout. Given that SA needs to do bayes database management 
from time to time (once or twice a day), some messages could take 
several minutes to scan, as this one probably did. (bayes expiry can be 
slow if your system isn't fast and/or your database is large.)

That post is about disabling timeouts, I'd just eliminate the -t option 
and let spamc manage its own timeouts at the default of 600 seconds.