You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Robert Kudyba <rk...@fordham.edu> on 2017/07/14 03:13:23 UTC
reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?
Over the past few days sending mail via SquirrelMail has become glacial.
The load on the server is under 1. I've restarted the SA, sendmail and
dovecot processes several times. Here are some logs I can provide any
settings if desired.
Jul 13 23:03:24 storm sendmail[14504]: v6E33EOQ014504:
Authentication-Warning: our-domain: apache set sender to me@our-domain
using -f
Jul 13 23:03:39 storm sendmail[14504]: v6E33EOQ014504: from=me@our-domain,
size=535, class=0, nrcpts=1,
msgid=<9c...@our-domain>,
relay=apache@localhost
Jul 13 23:04:05 storm sendmail[14629]: v6E33ddm014629: from=<me...@our-domain>,
size=779, class=0, nrcpts=1,
msgid=<9c...@our-domain>, proto=ESMTP,
daemon=MTA-loopback, relay=localhost [127.0.0.1]
Jul 13 23:04:05 storm sendmail[14629]: v6E33ddm014629: Milter insert (1):
header: X-Virus-Scanned: clamav-milter 0.99.2 at our-domain
Jul 13 23:04:05 storm sendmail[14629]: v6E33ddm014629: Milter insert (1):
header: X-Virus-Status: Clean
Jul 13 23:04:05 storm spamd[13378]: spamd: connection from localhost
[::1]:48316 to port 783, fd 5
Jul 13 23:04:05 storm spamd[13378]: spamd: using default config for root:
/home/spamd/user_prefs
Jul 13 23:04:05 storm spamd[13378]: spamd: processing message
<9c...@our-domain> for root:1001
Jul 13 23:04:20 storm spamd[13378]: spamd: clean message (-101.5/5.0) for
root:1001 in 15.0 seconds, 1193 bytes.
Jul 13 23:04:20 storm spamd[13378]: spamd: result: . -101 -
ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST
scantime=15.0,size=1193,user=root,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=48316,mid=<9c...@our-domain>,bayes=0.000000,autolearn=no
autolearn_force=no
Jul 13 23:04:20 storm sendmail[14629]: v6E33ddm014629: Milter add: header:
X-Spam-Status: No, score=-101.5 required=5.0
tests=ALL_TRUSTED,BAYES_00,\n\tPYZOR_CHECK,USER_IN_WHITELIST autolearn=no
autolearn_force=no version=3.4.1
Jul 13 23:04:20 storm sendmail[14629]: v6E33ddm014629: Milter add: header:
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on\n\tour-domain
Jul 13 23:04:20 storm sendmail[14504]: v6E33EOQ014504: to=me@our-domain,
ctladdr=me@our-domain (16836/16836), delay=00:01:06, xdelay=00:00:41,
mailer=relay, pri=30535, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0,
stat=Sent (v6E33ddm014629 Message accepted for delivery)
Jul 13 23:04:20 storm spamd[13309]: prefork: child states: II
Jul 13 23:04:20 storm spamd[13378]: spamd: connection from localhost
[::1]:48320 to port 783, fd 5
Jul 13 23:04:20 storm spamd[13378]: spamd: using default config for spamd:
/home/spamd/user_prefs
Jul 13 23:04:20 storm spamd[13378]: spamd: processing message
<9c...@our-domain> for spamd:1001
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?
Posted by "Andrzej A. Filip" <an...@gmail.com>.
Robert Kudyba <rk...@fordham.edu> wrote:
> n*5s delay *may* indicate unresponsive DNS host(s)/resolver(s) in /etc/hots
> [ at least it should be ruled out ]
>
> Nah both are university DNS servers that are current.
>
> How long does it take to get SMTP greeting message when you start
> "/usr/sbin/sendmail -bs" as a non root user?
> [ Is it sendmail startup or message processing? ]
>
> The latter, starts up and restarts quickly, couple seconds.
It should be less than 1s.
You may send a test message as non root in verbose mode with DNS
tracking turned on.
(echo subject: test; echo; echo test) | /usr/sbin/sendmail -v -i -d8.20 -- _recipient-address_
sendmail asks DNS also about domains in email headers (To:, Cc:, From:, ...)
> > [...]
> > Jul 13 23:04:05 storm spamd[13378]: spamd: processing message <9c...@our-domain> for root:1001
> > Jul 13 23:04:20 storm spamd[13378]: spamd: clean message (-101.5/5.0) for root:1001 in 15.0 seconds, 1193 bytes.
> > Jul 13 23:04:20 storm spamd[13378]: spamd: result: . -101 - ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST
> > scantime=15.0 [...]
>
> Hitting PYZOR_CHECK is scary.
>
> So I can try and disable to see if there's a difference.
>
> Sounds like we should also try a local DNS server too...
Your ham messages should not hit PYZOR_CHECK - it is supposed to detect
bulk spam.
--
A. Filip
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?
Posted by Robert Kudyba <rk...@fordham.edu>.
> n*5s delay *may* indicate unresponsive DNS host(s)/resolver(s) in /etc/hots
> [ at least it should be ruled out ]
>
Nah both are university DNS servers that are current.
>
> How long does it take to get SMTP greeting message when you start
> "/usr/sbin/sendmail -bs" as a non root user?
> [ Is it sendmail startup or message processing? ]
>
The latter, starts up and restarts quickly, couple seconds.
>
> > [...]
> > Jul 13 23:04:05 storm spamd[13378]: spamd: processing message <
> 9ca00a710c6bfad3d60dd424cd79ac19.squirrel@our-domain> for root:1001
> > Jul 13 23:04:20 storm spamd[13378]: spamd: clean message (-101.5/5.0)
> for root:1001 in 15.0 seconds, 1193 bytes.
> > Jul 13 23:04:20 storm spamd[13378]: spamd: result: . -101 -
> ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST
> > scantime=15.0 [...]
>
> Hitting PYZOR_CHECK is scary.
So I can try and disable to see if there's a difference.
Sounds like we should also try a local DNS server too...
>
>
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by RW <rw...@googlemail.com>.
On Fri, 14 Jul 2017 10:00:45 +0200
Matus UHLAR - fantomas wrote:
> >Robert Kudyba <rk...@fordham.edu> wrote:
> >> Jul 13 23:04:05 storm spamd[13378]: spamd: processing message
> >> <9c...@our-domain> for
> >> root:1001 Jul 13 23:04:20 storm spamd[13378]: spamd: clean message
> >> (-101.5/5.0) for root:1001 in 15.0 seconds, 1193 bytes. Jul 13
> >> 23:04:20 storm spamd[13378]: spamd: result: . -101 -
> >> ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST scantime=15.0
> >> [...]
> >
> >Hitting PYZOR_CHECK is scary.
>
> not at all. well, it MAY cause some delay but the default pyzor
> timeout is 3.5 seconds
It's hitting ALL_TRUSTED so I think he probably means it's that's it's
scary that his own mail hit PYZOR_CHECK.
It's probably an empty body or just a standard signature.
If you use pyzor it's a good idea to run, at very least,
echo "" | pyzor local_whitelist
Possibly with --homedir= or --local-whitelist set as appropriate, or
run it as any unix user and copy ~/.pyzor/whitelist to the equivalent
location that's used by SA.
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by RW <rw...@googlemail.com>.
On Mon, 17 Jul 2017 11:33:42 -0400
Robert Kudyba wrote:
> > try running
> >
> > spamassassin -D razor2
> > < /usr/share/doc/spamassassin/sample-spam.txt
> >
> > as the user amavis.
>
> su - -s /bin/bash amavis -c "spamassassin -D razor2
> < /usr/share/doc/spamassassin/sample-spam.txt"
...
> Jul 17 11:32:20.042829 check[7631]: [ 5] Connecting to
> discovery.razor.cloudmark.com ... Jul 17 11:32:25.050 [7631] dbg:
> razor2: razor2 check timed out after 5 seconds
I tried playing around with this and I did get a couple timeouts on
this server, but it's rarely attempted it on checks, I think it's
governed by a timer.
You don't have a razor-agent.conf file in the .razor directory which
is a bit strange since it gets created by default. If you haven't
already tried this I'd move the existing .razor directory, and recreate
it by running
razor-admin -create
as the amavis user.
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by RW <rw...@googlemail.com>.
On Mon, 17 Jul 2017 10:39:39 -0400
Robert Kudyba wrote:
> > On Jul 17, 2017, at 10:28 AM, Tom Hendrikx <to...@whyscream.net>
> > wrote:
> > The error is still the same. Do you even have access to those
> > cloudmark razor servers? Does razor work outside of
> > spamassassin/amavisd?
>
> Is that supposed to be a paid service? This test seems successful.
>
> razor-check -d < /usr/share/doc/spamassassin/sample-spam.txt
try running
spamassassin -D razor2 < /usr/share/doc/spamassassin/sample-spam.txt
as the user amavis.
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Robert Kudyba <rk...@fordham.edu>.
> On Jul 17, 2017, at 11:01 AM, Tom Hendrikx <to...@whyscream.net> wrote:
>
> On 17-07-17 16:39, Robert Kudyba wrote:
>>
>>> On Jul 17, 2017, at 10:28 AM, Tom Hendrikx <tom@whyscream.net
>>> <ma...@whyscream.net>> wrote:
>>>
>>> On 17-07-17 16:00, Robert Kudyba wrote:
>>>>
>>>>> On Jul 17, 2017, at 9:39 AM, Antony Stone
>>>>> <Antony.Stone@spamassassin.open.source.it
>>>>> <ma...@spamassassin.open.source.it>
>>>>> <ma...@spamassassin.open.source.it>> wrote:
>>>>>
>>>>> On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote:
>>>>>
>>>>>>> On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas
>>>>>>> <uhlar@fantomas.sk <ma...@fantomas.sk>
>>>>>>> <ma...@fantomas.sk>>
>>>>> wrote:
>>>>>>>> Robert Kudyba <rkudyba@fordham.edu <ma...@fordham.edu>
>>>>>>>> <ma...@fordham.edu>> wrote:
>>>>>>>>> Over the past few days sending mail via SquirrelMail has become
>>>>>>>>> glacial. The load on the server is under 1. I've restarted the SA,
>>>>>>>>> sendmail and dovecot processes several times. Here are some logs
>>>>>>>>> I can
>>>>>>>>> provide any settings if desired.
>>>>>>>
>>>>>>> tried to run a message through "spamassassin -D" ?
>>>>>>> that should give you debug/timing info.
>>>>>>
>>>>>> OK here is the pastebin of spamassassin -D < gtube.txt:
>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_iZtm2hhy&d=DwIFAw&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=wV3-oZ_3m8NtSuw_6UTtdU1WptL8Pl1vNOok-EXrcZo&s=802-414zeT59KVCIFVa_uxfSq0XezT7e4OVZibWbIwc&e=
>>>>>>
>>>>>
>>>>>
>>>>> Jul 16 09:01:42.796 [29903] dbg: dns: entering helper-app run mode
>>>>> Jul 16 09:01:47.806 [29903] dbg: dns: leaving helper-app run mode
>>>>> Jul 16 09:01:47.806 [29903] dbg: razor2: razor2 check timed out after 5
>>>>> seconds
>>>>
>>>> OK so I ran: /var/spool/amavisd/.razor
>>>>
>>>> ls -l /var/spool/amavisd/.razor
>>>> total 100
>>>> -rw-r----- 1 amavis amavis 72420 Dec 22 2014 razor-agent.log
>>>> -rw-r----- 1 amavis amavis 998 Jul 17 09:49
>>>> server.c301.cloudmark.com.conf
>>>> -rw-r----- 1 amavis amavis 998 Jul 17 09:46
>>>> server.c302.cloudmark.com.conf
>>>> -rw-r----- 1 amavis amavis 995 Dec 20 2014
>>>> server.c303.cloudmark.com.conf
>>>> -rw-r----- 1 amavis amavis 57 Jul 17 09:49 servers.catalogue.lst
>>>> -rw-r----- 1 amavis amavis 30 May 23 2013 servers.discovery.lst
>>>> -rw-r----- 1 amavis amavis 76 Jul 17 09:49 servers.nomination.lst
>>>>
>>>> New pastebin:
>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_9RWEYuSt&d=DwIC-g&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=QspHQBi1X_n1ZQylsERsyborPsWRSy3cHQlXJ8FUf7c&s=DZ63JGDSr9nTI6HaajZtLRvUf0ao4tBA4dKtq_77Xlg&e=
>>>>
>>>>
>>>> Still taking 15 seconds.
>>>>
>>>> Jul 17 09:55:28 storm spamd[28111]: spamd: clean message (-103.4/5.0)
>>>> for spamd:1001 in 15.0 seconds, 1843 bytes.
>>>> Jul 17 09:55:28 storm spamd[28111]: spamd: result: . -103 -
>>>> ALL_TRUSTED,BAYES_00,FROM_IS_TO,USER_IN_WHITELIST
>>>> scantime=15.0,size=1843,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=53074,mid=<32...@ourdomain>,bayes=0.000000,autolearn=no
>>>> autolearn_force=no
>>>> Jul 17 09:55:28 storm spamd[28041]: prefork: child states: II
>>>>
>>>
>>> The error is still the same. Do you even have access to those cloudmark
>>> razor servers? Does razor work outside of spamassassin/amavisd?
>>
>> Is that supposed to be a paid service? This test seems successful.
>>
>> razor-check -d < /usr/share/doc/spamassassin/sample-spam.txt
>> Razor-Log: Computed razorhome from env: /root/.razor
>> Razor-Log: Found razorhome: /root/.razor
>> Razor-Log: read_file: 15 items read from /root/.razor/razor-agent.conf
>
> Note that the paths are different when you run this as root. Does it
> also work when you run it as user amavisd? And don't bother posting the
> full log unless you're unsure about the actual outcome. You can read
> them yourself.
Sorry about that now I ran the spamassassin -D along with the snip from the mail logs to compare. Well over 15 seconds still. The pastebin link is https://pastebin.com/QErFZZfa still seeing dbg: razor2: razor2 check timed out after 5 seconds. This time I made sure to get the permissions for razor and path correct:
ls -l /home/spamd/.razor/
total 101440
lrwxrwxrwx 1 spamd spamd 19 Jul 17 16:29 identity -> identity-ruB7GdYfW1
-rw------- 1 spamd spamd 90 Jul 17 16:29 identity-ruB7GdYfW1
-rw-rw-r-- 1 spamd spamd 706 Jul 17 16:29 razor-agent.conf
-rw-r--r-- 1 spamd spamd 103770988 Jul 17 16:48 razor-agent.log
-rw-r--r-- 1 spamd spamd 998 Jul 17 16:34 server.c301.cloudmark.com.conf
-rw-r--r-- 1 spamd spamd 998 Jul 17 16:29 server.c302.cloudmark.com.conf
-rw-r--r-- 1 spamd spamd 998 Jul 17 16:29 server.c303.cloudmark.com.conf
-rw-rw-r-- 1 spamd spamd 899 Jul 17 16:29 server.n004.cloudmark.com.conf
-rw-r--r-- 1 spamd spamd 57 Jul 17 16:30 servers.catalogue.lst
-rw-r--r-- 1 spamd spamd 30 Jul 17 16:30 servers.discovery.lst
-rw-r--r-- 1 spamd spamd 76 Jul 17 16:30 servers.nomination.lst
In /etc/mail/spamassassin/local.cf:
razor_config /home/spamd/.razor/razor-agent.conf
razorhomr /home/spamd/.razor/
Here are the mail logs:
Jul 17 16:41:24 storm sendmail[8199]: v6HKfEaL008199: Authentication-Warning: ourdomain: apache set sender to myuser@yahoo.com using -f
Jul 17 16:41:59 storm spamd[4819]: spamd: server successfully spawned child process, pid 8555
Jul 17 16:41:59 storm spamd[4819]: prefork: adjust: 0 idle children less than 1 minimum idle children. Increasing spamd children: 8555 started.
Jul 17 16:41:59 storm spamd[4819]: prefork: child states: BBBI
Jul 17 16:41:59 storm spamd[8554]: spamd: processing message <20...@ourdomain> for root:1001
Jul 17 16:41:59 storm sendmail[8199]: v6HKfEaL008199: to=myuser@yahoo.com, ctladdr=myuser@ourdomain (16836/16836), delay=00:00:45, xdelay=00:00:30, mailer=relay, pri=31004, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (v6HKfTDY008359 Message accepted for delivery)
Jul 17 16:42:10 storm spamd[4903]: spamd: clean message (-2.9/5.0) for spamd:1001 in 15.1 seconds, 4049 bytes.
Jul 17 16:42:10 storm spamd[4903]: spamd: result: . -2 - ALL_TRUSTED,BAYES_00,FILL_THIS_FORM scantime=15.1,size=4049,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=59502,mid=<201707172041.v6HKfEFb008216@ ourdomain>,bayes=0.000000,autolearn=no autolearn_force=no
Jul 17 16:42:10 storm sendmail[8422]: v6HKfFtr008276: to=myuser@ourdomain, delay=00:00:45, xdelay=00:00:15, mailer=local, pri=33964, dsn=2.0.0, stat=Sent
Jul 17 16:42:10 storm spamd[4819]: prefork: child states: BIBI
Jul 17 16:42:14 storm spamd[8554]: spamd: clean message (-2.9/5.0) for root:1001 in 15.1 seconds, 3967 bytes.
Jul 17 16:42:14 storm spamd[8554]: spamd: result: . -2 - ALL_TRUSTED,BAYES_00,FILL_THIS_FORM scantime=15.1,size=3967,user=root,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=59512,mid=<20...@ourdomain>,bayes=0.000000,autolearn=no autolearn_force=no
Jul 17 16:42:14 storm sendmail[8491]: v6HKfltU008491: Milter add: header: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00,\n\tFILL_THIS_FORM autolearn=no autolearn_force=no version=3.4.1
Jul 17 16:42:14 storm sendmail[8491]: v6HKfltU008491: Milter add: header: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on\n\t ourdomain
Jul 17 16:42:15 storm sendmail[8458]: v6HKflwP008458: to=root, delay=00:00:28, xdelay=00:00:28, mailer=relay, pri=33209, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (v6HKfltU008491 Message accepted for delivery)
Jul 17 16:42:15 storm spamd[4819]: prefork: child states: BIII
Jul 17 16:42:15 storm spamd[4819]: prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing spamd children: 8555 killed.
Jul 17 16:42:15 storm spamd[4819]: prefork: child states: BIIK
Jul 17 16:42:15 storm spamd[4819]: spamd: handled cleanup of child pid [8555] due to SIGCHLD: interrupted, signal 2 (0002)
Jul 17 16:42:15 storm sendmail[8557]: STARTTLS=client, relay=mta6.am0.yahoodns.net., version=TLSv1.2, verify=FAIL, cipher=ECDHE-RSA-AES128-GCM-SHA256, bits=128/128
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Tom Hendrikx <to...@whyscream.net>.
On 17-07-17 16:39, Robert Kudyba wrote:
>
>> On Jul 17, 2017, at 10:28 AM, Tom Hendrikx <tom@whyscream.net
>> <ma...@whyscream.net>> wrote:
>>
>> On 17-07-17 16:00, Robert Kudyba wrote:
>>>
>>>> On Jul 17, 2017, at 9:39 AM, Antony Stone
>>>> <Antony.Stone@spamassassin.open.source.it
>>>> <ma...@spamassassin.open.source.it>
>>>> <ma...@spamassassin.open.source.it>> wrote:
>>>>
>>>> On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote:
>>>>
>>>>>> On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas
>>>>>> <uhlar@fantomas.sk <ma...@fantomas.sk>
>>>>>> <ma...@fantomas.sk>>
>>>> wrote:
>>>>>>> Robert Kudyba <rkudyba@fordham.edu <ma...@fordham.edu>
>>>>>>> <ma...@fordham.edu>> wrote:
>>>>>>>> Over the past few days sending mail via SquirrelMail has become
>>>>>>>> glacial. The load on the server is under 1. I've restarted the SA,
>>>>>>>> sendmail and dovecot processes several times. Here are some logs
>>>>>>>> I can
>>>>>>>> provide any settings if desired.
>>>>>>
>>>>>> tried to run a message through "spamassassin -D" ?
>>>>>> that should give you debug/timing info.
>>>>>
>>>>> OK here is the pastebin of spamassassin -D < gtube.txt:
>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_iZtm2hhy&d=DwIFAw&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=wV3-oZ_3m8NtSuw_6UTtdU1WptL8Pl1vNOok-EXrcZo&s=802-414zeT59KVCIFVa_uxfSq0XezT7e4OVZibWbIwc&e=
>>>>>
>>>>
>>>>
>>>> Jul 16 09:01:42.796 [29903] dbg: dns: entering helper-app run mode
>>>> Jul 16 09:01:47.806 [29903] dbg: dns: leaving helper-app run mode
>>>> Jul 16 09:01:47.806 [29903] dbg: razor2: razor2 check timed out after 5
>>>> seconds
>>>
>>> OK so I ran: /var/spool/amavisd/.razor
>>>
>>> ls -l /var/spool/amavisd/.razor
>>> total 100
>>> -rw-r----- 1 amavis amavis 72420 Dec 22 2014 razor-agent.log
>>> -rw-r----- 1 amavis amavis 998 Jul 17 09:49
>>> server.c301.cloudmark.com.conf
>>> -rw-r----- 1 amavis amavis 998 Jul 17 09:46
>>> server.c302.cloudmark.com.conf
>>> -rw-r----- 1 amavis amavis 995 Dec 20 2014
>>> server.c303.cloudmark.com.conf
>>> -rw-r----- 1 amavis amavis 57 Jul 17 09:49 servers.catalogue.lst
>>> -rw-r----- 1 amavis amavis 30 May 23 2013 servers.discovery.lst
>>> -rw-r----- 1 amavis amavis 76 Jul 17 09:49 servers.nomination.lst
>>>
>>> New pastebin:
>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_9RWEYuSt&d=DwIC-g&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=QspHQBi1X_n1ZQylsERsyborPsWRSy3cHQlXJ8FUf7c&s=DZ63JGDSr9nTI6HaajZtLRvUf0ao4tBA4dKtq_77Xlg&e=
>>>
>>>
>>> Still taking 15 seconds.
>>>
>>> Jul 17 09:55:28 storm spamd[28111]: spamd: clean message (-103.4/5.0)
>>> for spamd:1001 in 15.0 seconds, 1843 bytes.
>>> Jul 17 09:55:28 storm spamd[28111]: spamd: result: . -103 -
>>> ALL_TRUSTED,BAYES_00,FROM_IS_TO,USER_IN_WHITELIST
>>> scantime=15.0,size=1843,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=53074,mid=<32...@ourdomain>,bayes=0.000000,autolearn=no
>>> autolearn_force=no
>>> Jul 17 09:55:28 storm spamd[28041]: prefork: child states: II
>>>
>>
>> The error is still the same. Do you even have access to those cloudmark
>> razor servers? Does razor work outside of spamassassin/amavisd?
>
> Is that supposed to be a paid service? This test seems successful.
>
> razor-check -d < /usr/share/doc/spamassassin/sample-spam.txt
> Razor-Log: Computed razorhome from env: /root/.razor
> Razor-Log: Found razorhome: /root/.razor
> Razor-Log: read_file: 15 items read from /root/.razor/razor-agent.conf
Note that the paths are different when you run this as root. Does it
also work when you run it as user amavisd? And don't bother posting the
full log unless you're unsure about the actual outcome. You can read
them yourself.
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Robert Kudyba <rk...@fordham.edu>.
> On Jul 17, 2017, at 10:28 AM, Tom Hendrikx <to...@whyscream.net> wrote:
>
> On 17-07-17 16:00, Robert Kudyba wrote:
>>
>>> On Jul 17, 2017, at 9:39 AM, Antony Stone
>>> <Antony.Stone@spamassassin.open.source.it
>>> <ma...@spamassassin.open.source.it>> wrote:
>>>
>>> On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote:
>>>
>>>>> On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas
>>>>> <uhlar@fantomas.sk <ma...@fantomas.sk>>
>>> wrote:
>>>>>> Robert Kudyba <rkudyba@fordham.edu <ma...@fordham.edu>> wrote:
>>>>>>> Over the past few days sending mail via SquirrelMail has become
>>>>>>> glacial. The load on the server is under 1. I've restarted the SA,
>>>>>>> sendmail and dovecot processes several times. Here are some logs I can
>>>>>>> provide any settings if desired.
>>>>>
>>>>> tried to run a message through "spamassassin -D" ?
>>>>> that should give you debug/timing info.
>>>>
>>>> OK here is the pastebin of spamassassin -D < gtube.txt:
>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_iZtm2hhy&d=DwIFAw&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=wV3-oZ_3m8NtSuw_6UTtdU1WptL8Pl1vNOok-EXrcZo&s=802-414zeT59KVCIFVa_uxfSq0XezT7e4OVZibWbIwc&e=
>>>>
>>>
>>>
>>> Jul 16 09:01:42.796 [29903] dbg: dns: entering helper-app run mode
>>> Jul 16 09:01:47.806 [29903] dbg: dns: leaving helper-app run mode
>>> Jul 16 09:01:47.806 [29903] dbg: razor2: razor2 check timed out after 5
>>> seconds
>>
>> OK so I ran: /var/spool/amavisd/.razor
>>
>> ls -l /var/spool/amavisd/.razor
>> total 100
>> -rw-r----- 1 amavis amavis 72420 Dec 22 2014 razor-agent.log
>> -rw-r----- 1 amavis amavis 998 Jul 17 09:49 server.c301.cloudmark.com.conf
>> -rw-r----- 1 amavis amavis 998 Jul 17 09:46 server.c302.cloudmark.com.conf
>> -rw-r----- 1 amavis amavis 995 Dec 20 2014 server.c303.cloudmark.com.conf
>> -rw-r----- 1 amavis amavis 57 Jul 17 09:49 servers.catalogue.lst
>> -rw-r----- 1 amavis amavis 30 May 23 2013 servers.discovery.lst
>> -rw-r----- 1 amavis amavis 76 Jul 17 09:49 servers.nomination.lst
>>
>> New pastebin: https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_9RWEYuSt&d=DwIC-g&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=QspHQBi1X_n1ZQylsERsyborPsWRSy3cHQlXJ8FUf7c&s=DZ63JGDSr9nTI6HaajZtLRvUf0ao4tBA4dKtq_77Xlg&e=
>>
>> Still taking 15 seconds.
>>
>> Jul 17 09:55:28 storm spamd[28111]: spamd: clean message (-103.4/5.0)
>> for spamd:1001 in 15.0 seconds, 1843 bytes.
>> Jul 17 09:55:28 storm spamd[28111]: spamd: result: . -103 -
>> ALL_TRUSTED,BAYES_00,FROM_IS_TO,USER_IN_WHITELIST
>> scantime=15.0,size=1843,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=53074,mid=<32...@ourdomain>,bayes=0.000000,autolearn=no
>> autolearn_force=no
>> Jul 17 09:55:28 storm spamd[28041]: prefork: child states: II
>>
>
> The error is still the same. Do you even have access to those cloudmark
> razor servers? Does razor work outside of spamassassin/amavisd?
Is that supposed to be a paid service? This test seems successful.
razor-check -d < /usr/share/doc/spamassassin/sample-spam.txt
Razor-Log: Computed razorhome from env: /root/.razor
Razor-Log: Found razorhome: /root/.razor
Razor-Log: read_file: 15 items read from /root/.razor/razor-agent.conf
Jul 17 10:38:14.467263 check[20932]: [ 2] [bootup] Logging initiated LogDebugLevel=9 to stdout
Jul 17 10:38:14.467525 check[20932]: [ 5] computed razorhome=/root/.razor, conf=/root/.razor/razor-agent.conf, ident=/root/.razor/identity
Jul 17 10:38:14.467584 check[20932]: [ 2] Razor-Agents v2.84 starting razor-check -d
Jul 17 10:38:14.467707 check[20932]: [ 8] reading straight RFC822 mail from <stdin>
Jul 17 10:38:14.467809 check[20932]: [ 6] read 1 mail
Jul 17 10:38:14.467905 check[20932]: [ 8] Client supported_engines: 4 8
Jul 17 10:38:14.468110 check[20932]: [ 8] prep_mail done: mail 1 headers=293, mime0=616
Jul 17 10:38:14.468241 check[20932]: [ 6] skipping whitelist file (empty?): /root/.razor/razor-whitelist
Jul 17 10:38:14.468383 check[20932]: [ 5] read_file: 1 items read from /root/.razor/servers.discovery.lst
Jul 17 10:38:14.468528 check[20932]: [ 5] read_file: 0 items read from /root/.razor/servers.nomination.lst
Jul 17 10:38:14.468671 check[20932]: [ 5] read_file: 3 items read from /root/.razor/servers.catalogue.lst
Jul 17 10:38:14.468862 check[20932]: [ 9] Assigning defaults to c303.cloudmark.com
Jul 17 10:38:14.468957 check[20932]: [ 9] Assigning defaults to c301.cloudmark.com
Jul 17 10:38:14.469043 check[20932]: [ 9] Assigning defaults to c302.cloudmark.com
Jul 17 10:38:14.469567 check[20932]: [ 5] read_file: 32 items read from /root/.razor/server.c303.cloudmark.com.conf
Jul 17 10:38:14.469944 check[20932]: [ 5] read_file: 32 items read from /root/.razor/server.c303.cloudmark.com.conf
Jul 17 10:38:14.470333 check[20932]: [ 5] read_file: 32 items read from /root/.razor/server.c302.cloudmark.com.conf
Jul 17 10:38:14.470710 check[20932]: [ 5] read_file: 32 items read from /root/.razor/server.c302.cloudmark.com.conf
Jul 17 10:38:14.471098 check[20932]: [ 5] read_file: 32 items read from /root/.razor/server.c301.cloudmark.com.conf
Jul 17 10:38:14.471475 check[20932]: [ 5] read_file: 32 items read from /root/.razor/server.c301.cloudmark.com.conf
Jul 17 10:38:14.471586 check[20932]: [ 5] server discovery overdue by 89981385 seconds
Jul 17 10:38:14.471652 check[20932]: [ 8] already have 1 discovery servers
Jul 17 10:38:14.471713 check[20932]: [ 8] Checking with Razor Discovery Server discovery.razor.cloudmark.com
Jul 17 10:38:14.471780 check[20932]: [ 6] No port specified, using 2703
Jul 17 10:38:14.471827 check[20932]: [ 5] Connecting to discovery.razor.cloudmark.com ...
Jul 17 10:38:24.488675 check[20932]: [ 8] Connection established
Jul 17 10:38:24.488824 check[20932]: [ 4] discovery.razor.cloudmark.com >> 23 server greeting: sn=D&srl=668&a=l&a=cg
Jul 17 10:38:24.488971 check[20932]: [ 4] discovery.razor.cloudmark.com << 12
Jul 17 10:38:24.489043 check[20932]: [ 6] a=g&pm=csl
Jul 17 10:38:24.542170 check[20932]: [ 4] discovery.razor.cloudmark.com >> 71
Jul 17 10:38:24.542254 check[20932]: [ 6] response to sent.1
-csl=?
c302.cloudmark.com
c301.cloudmark.com
c303.cloudmark.com
.
Jul 17 10:38:24.542394 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with csl=c302.cloudmark.com
Jul 17 10:38:24.542496 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with csl=c301.cloudmark.com
Jul 17 10:38:24.542556 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with csl=c303.cloudmark.com
Jul 17 10:38:24.542661 check[20932]: [ 4] discovery.razor.cloudmark.com << 12
Jul 17 10:38:24.542724 check[20932]: [ 6] a=g&pm=nsl
Jul 17 10:38:24.546362 check[20932]: [ 4] discovery.razor.cloudmark.com >> 91
Jul 17 10:38:24.546473 check[20932]: [ 6] response to sent.2
-nsl=?
n001.cloudmark.com
n003.cloudmark.com
n004.cloudmark.com
n002.cloudmark.com
.
Jul 17 10:38:24.546614 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n001.cloudmark.com
Jul 17 10:38:24.546684 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n003.cloudmark.com
Jul 17 10:38:24.546740 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n004.cloudmark.com
Jul 17 10:38:24.546796 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n002.cloudmark.com
Jul 17 10:38:24.546918 check[20932]: [ 5] disconnecting from server discovery.razor.cloudmark.com
Jul 17 10:38:24.547020 check[20932]: [ 4] discovery.razor.cloudmark.com << 5
Jul 17 10:38:24.547081 check[20932]: [ 6] a=q
Jul 17 10:38:24.554881 check[20932]: [ 5] writeservers skipping .lst file: /root/.razor/servers.catalogue.lst
Jul 17 10:38:24.557938 check[20932]: [ 5] writeservers skipping .lst file: /root/.razor/servers.nomination.lst
Jul 17 10:38:24.558095 check[20932]: [ 6] c303.cloudmark.com is a Catalogue Server srl 34517; computed min_cf=21, Server se: 2380
Jul 17 10:38:24.558227 check[20932]: [ 8] Computed supported_engines: 8
Jul 17 10:38:24.558344 check[20932]: [ 8] Using next closest server c303.cloudmark.com:2703, cached info srl 34517
Jul 17 10:38:24.558475 check[20932]: [ 8] mail 1 has no subject
Jul 17 10:38:24.558735 check[20932]: [ 6] preproc: mail 1.0 went from 616 bytes to 503
Jul 17 10:38:24.558827 check[20932]: [ 6] computing sigs for mail 1.0, len 503
Jul 17 10:38:24.559334 check[20932]: [ 6] Engine (8) didn't produce a signature for mail 1.0
Jul 17 10:38:24.559502 check[20932]: [ 5] Connecting to c303.cloudmark.com ...
Jul 17 10:38:29.572663 check[20932]: [ 8] Connection established
Jul 17 10:38:29.572819 check[20932]: [ 4] c303.cloudmark.com >> 25 server greeting: sn=C&srl=35001&a=l&a=cg
Jul 17 10:38:29.572994 check[20932]: [ 4] c303.cloudmark.com << 25
Jul 17 10:38:29.573051 check[20932]: [ 6] cn=razor-agents&cv=2.84
Jul 17 10:38:29.573175 check[20932]: [ 4] c303.cloudmark.com << 14
Jul 17 10:38:29.573230 check[20932]: [ 6] a=g&pm=state
Jul 17 10:38:29.672515 check[20932]: [ 4] c303.cloudmark.com >> 279
Jul 17 10:38:29.672613 check[20932]: [ 6] response to sent.5
-sn=C
sv=4.007
zone=razor2.cloudmark.com
ac=21
srl=35001
lm=4
bql=50
bqs=329
dre=8
srf=FF
sa=2FB
se=2380
to=15
nmp=2
ep8=20
ep10=20
ep19=5
ep20=5
ep21=5
ep22=5
crt=90
immdi=1
imsio=0
lsp=3
lsp10=0
mps=300
mhs=15
mphs=4
cp=7 1 16 6 5 4 3 2 0
cs=1
.
Jul 17 10:38:29.673088 check[20932]: [ 5] Updated to new server state srl 35001 for server c303.cloudmark.com
Jul 17 10:38:29.673169 check[20932]: [ 6] c303.cloudmark.com is a Catalogue Server srl 35001; computed min_cf=21, Server se: 2380
Jul 17 10:38:29.673268 check[20932]: [ 8] Computed supported_engines: 8
Jul 17 10:38:29.699183 check[20932]: [ 5] wrote 32 HASH items to file: /root/.razor/server.c303.cloudmark.com.conf
Jul 17 10:38:29.699282 check[20932]: [ 5] srl was updated, forcing discovery ...
Jul 17 10:38:29.699370 check[20932]: [ 5] server discovery overdue by 89977211 seconds
Jul 17 10:38:29.699455 check[20932]: [ 8] already have 1 discovery servers
Jul 17 10:38:29.699534 check[20932]: [ 8] Checking with Razor Discovery Server discovery.razor.cloudmark.com
Jul 17 10:38:29.699616 check[20932]: [ 6] losing old server connection, c303.cloudmark.com, for new server, discovery.razor.cloudmark.com
Jul 17 10:38:29.699666 check[20932]: [ 5] disconnecting from server c303.cloudmark.com
Jul 17 10:38:29.699762 check[20932]: [ 4] c303.cloudmark.com << 5
Jul 17 10:38:29.699811 check[20932]: [ 6] a=q
Jul 17 10:38:29.699908 check[20932]: [ 5] Connecting to discovery.razor.cloudmark.com ...
Jul 17 10:38:34.708679 check[20932]: [ 8] Connection established
Jul 17 10:38:34.708871 check[20932]: [ 4] discovery.razor.cloudmark.com >> 23 server greeting: sn=D&srl=668&a=l&a=cg
Jul 17 10:38:34.708993 check[20932]: [ 4] discovery.razor.cloudmark.com << 12
Jul 17 10:38:34.709047 check[20932]: [ 6] a=g&pm=csl
Jul 17 10:38:34.784691 check[20932]: [ 4] discovery.razor.cloudmark.com >> 71
Jul 17 10:38:34.784821 check[20932]: [ 6] response to sent.7
-csl=?
c301.cloudmark.com
c302.cloudmark.com
c303.cloudmark.com
.
Jul 17 10:38:34.784956 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with csl=c301.cloudmark.com
Jul 17 10:38:34.785013 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with csl=c302.cloudmark.com
Jul 17 10:38:34.785060 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with csl=c303.cloudmark.com
Jul 17 10:38:34.785160 check[20932]: [ 4] discovery.razor.cloudmark.com << 12
Jul 17 10:38:34.785210 check[20932]: [ 6] a=g&pm=nsl
Jul 17 10:38:34.788848 check[20932]: [ 4] discovery.razor.cloudmark.com >> 91
Jul 17 10:38:34.788976 check[20932]: [ 6] response to sent.8
-nsl=?
n004.cloudmark.com
n002.cloudmark.com
n003.cloudmark.com
n001.cloudmark.com
.
Jul 17 10:38:34.789115 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n004.cloudmark.com
Jul 17 10:38:34.789171 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n002.cloudmark.com
Jul 17 10:38:34.789242 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n003.cloudmark.com
Jul 17 10:38:34.789290 check[20932]: [ 8] Discovery Server discovery.razor.cloudmark.com replying with nsl=n001.cloudmark.com
Jul 17 10:38:34.789400 check[20932]: [ 5] disconnecting from server discovery.razor.cloudmark.com
Jul 17 10:38:34.789570 check[20932]: [ 4] discovery.razor.cloudmark.com << 5
Jul 17 10:38:34.789623 check[20932]: [ 6] a=q
Jul 17 10:38:34.789789 check[20932]: [ 5] writeservers skipping .lst file: /root/.razor/servers.catalogue.lst
Jul 17 10:38:34.789865 check[20932]: [ 5] writeservers skipping .lst file: /root/.razor/servers.nomination.lst
Jul 17 10:38:34.790058 check[20932]: [ 5] mail 1.0 e8 got no sig
Jul 17 10:38:34.790118 check[20932]: [ 5] No queries, no spam
Jul 17 10:38:34.790168 check[20932]: [ 5] already disconnected from server discovery.razor.cloudmark.com
Jul 17 10:38:34.790243 check[20932]: [ 8] razor-check finished successfully.
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Tom Hendrikx <to...@whyscream.net>.
On 17-07-17 16:00, Robert Kudyba wrote:
>
>> On Jul 17, 2017, at 9:39 AM, Antony Stone
>> <Antony.Stone@spamassassin.open.source.it
>> <ma...@spamassassin.open.source.it>> wrote:
>>
>> On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote:
>>
>>>> On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas
>>>> <uhlar@fantomas.sk <ma...@fantomas.sk>>
>> wrote:
>>>>> Robert Kudyba <rkudyba@fordham.edu <ma...@fordham.edu>> wrote:
>>>>>> Over the past few days sending mail via SquirrelMail has become
>>>>>> glacial. The load on the server is under 1. I've restarted the SA,
>>>>>> sendmail and dovecot processes several times. Here are some logs I can
>>>>>> provide any settings if desired.
>>>>
>>>> tried to run a message through "spamassassin -D" ?
>>>> that should give you debug/timing info.
>>>
>>> OK here is the pastebin of spamassassin -D < gtube.txt:
>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_iZtm2hhy&d=DwIFAw&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=wV3-oZ_3m8NtSuw_6UTtdU1WptL8Pl1vNOok-EXrcZo&s=802-414zeT59KVCIFVa_uxfSq0XezT7e4OVZibWbIwc&e=
>>>
>>
>>
>> Jul 16 09:01:42.796 [29903] dbg: dns: entering helper-app run mode
>> Jul 16 09:01:47.806 [29903] dbg: dns: leaving helper-app run mode
>> Jul 16 09:01:47.806 [29903] dbg: razor2: razor2 check timed out after 5
>> seconds
>
> OK so I ran: /var/spool/amavisd/.razor
>
> ls -l /var/spool/amavisd/.razor
> total 100
> -rw-r----- 1 amavis amavis 72420 Dec 22 2014 razor-agent.log
> -rw-r----- 1 amavis amavis 998 Jul 17 09:49 server.c301.cloudmark.com.conf
> -rw-r----- 1 amavis amavis 998 Jul 17 09:46 server.c302.cloudmark.com.conf
> -rw-r----- 1 amavis amavis 995 Dec 20 2014 server.c303.cloudmark.com.conf
> -rw-r----- 1 amavis amavis 57 Jul 17 09:49 servers.catalogue.lst
> -rw-r----- 1 amavis amavis 30 May 23 2013 servers.discovery.lst
> -rw-r----- 1 amavis amavis 76 Jul 17 09:49 servers.nomination.lst
>
> New pastebin: https://pastebin.com/9RWEYuSt
>
> Still taking 15 seconds.
>
> Jul 17 09:55:28 storm spamd[28111]: spamd: clean message (-103.4/5.0)
> for spamd:1001 in 15.0 seconds, 1843 bytes.
> Jul 17 09:55:28 storm spamd[28111]: spamd: result: . -103 -
> ALL_TRUSTED,BAYES_00,FROM_IS_TO,USER_IN_WHITELIST
> scantime=15.0,size=1843,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=53074,mid=<32...@ourdomain>,bayes=0.000000,autolearn=no
> autolearn_force=no
> Jul 17 09:55:28 storm spamd[28041]: prefork: child states: II
>
The error is still the same. Do you even have access to those cloudmark
razor servers? Does razor work outside of spamassassin/amavisd?
Tom
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Robert Kudyba <rk...@fordham.edu>.
> On Jul 17, 2017, at 9:39 AM, Antony Stone <An...@spamassassin.open.source.it> wrote:
>
> On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote:
>
>>> On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas <uh...@fantomas.sk>
> wrote:
>>>> Robert Kudyba <rk...@fordham.edu> wrote:
>>>>> Over the past few days sending mail via SquirrelMail has become
>>>>> glacial. The load on the server is under 1. I've restarted the SA,
>>>>> sendmail and dovecot processes several times. Here are some logs I can
>>>>> provide any settings if desired.
>>>
>>> tried to run a message through "spamassassin -D" ?
>>> that should give you debug/timing info.
>>
>> OK here is the pastebin of spamassassin -D < gtube.txt:
>> https://urldefense.proofpoint.com/v2/url?u=https-3A__pastebin.com_iZtm2hhy&d=DwIFAw&c=aqMfXOEvEJQh2iQMCb7Wy8l0sPnURkcqADc2guUW8IM&r=X0jL9y0sL4r4iU_qVtR3lLNo4tOL1ry_m7-psV3GejY&m=wV3-oZ_3m8NtSuw_6UTtdU1WptL8Pl1vNOok-EXrcZo&s=802-414zeT59KVCIFVa_uxfSq0XezT7e4OVZibWbIwc&e=
>
>
> Jul 16 09:01:42.796 [29903] dbg: dns: entering helper-app run mode
> Jul 16 09:01:47.806 [29903] dbg: dns: leaving helper-app run mode
> Jul 16 09:01:47.806 [29903] dbg: razor2: razor2 check timed out after 5
> seconds
OK so I ran: /var/spool/amavisd/.razor
ls -l /var/spool/amavisd/.razor
total 100
-rw-r----- 1 amavis amavis 72420 Dec 22 2014 razor-agent.log
-rw-r----- 1 amavis amavis 998 Jul 17 09:49 server.c301.cloudmark.com.conf
-rw-r----- 1 amavis amavis 998 Jul 17 09:46 server.c302.cloudmark.com.conf
-rw-r----- 1 amavis amavis 995 Dec 20 2014 server.c303.cloudmark.com.conf
-rw-r----- 1 amavis amavis 57 Jul 17 09:49 servers.catalogue.lst
-rw-r----- 1 amavis amavis 30 May 23 2013 servers.discovery.lst
-rw-r----- 1 amavis amavis 76 Jul 17 09:49 servers.nomination.lst
New pastebin: https://pastebin.com/9RWEYuSt <https://pastebin.com/9RWEYuSt>
Still taking 15 seconds.
Jul 17 09:55:28 storm spamd[28111]: spamd: clean message (-103.4/5.0) for spamd:1001 in 15.0 seconds, 1843 bytes.
Jul 17 09:55:28 storm spamd[28111]: spamd: result: . -103 - ALL_TRUSTED,BAYES_00,FROM_IS_TO,USER_IN_WHITELIST scantime=15.0,size=1843,user=spamd,uid=1001,required_score=5.0,rhost=localhost,raddr=::1,rport=53074,mid=<32...@ourdomain>,bayes=0.000000,autolearn=no autolearn_force=no
Jul 17 09:55:28 storm spamd[28041]: prefork: child states: II
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?
Posted by Antony Stone <An...@spamassassin.open.source.it>.
On Monday 17 July 2017 at 14:25:17, Robert Kudyba wrote:
> > On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas <uh...@fantomas.sk>
wrote:
> >> Robert Kudyba <rk...@fordham.edu> wrote:
> >>> Over the past few days sending mail via SquirrelMail has become
> >>> glacial. The load on the server is under 1. I've restarted the SA,
> >>> sendmail and dovecot processes several times. Here are some logs I can
> >>> provide any settings if desired.
> >
> > tried to run a message through "spamassassin -D" ?
> > that should give you debug/timing info.
>
> OK here is the pastebin of spamassassin -D < gtube.txt:
> https://pastebin.com/iZtm2hhy
Jul 16 09:01:42.796 [29903] dbg: dns: entering helper-app run mode
Jul 16 09:01:47.806 [29903] dbg: dns: leaving helper-app run mode
Jul 16 09:01:47.806 [29903] dbg: razor2: razor2 check timed out after 5
seconds
Antony.
--
René Descartes walks in to a bar.
The barman asks him "Do you want a drink?"
Descartes says "I think not," and disappears.
Please reply to the list;
please *don't* CC me.
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Robert Kudyba <rk...@fordham.edu>.
> On Jul 14, 2017, at 4:00 AM, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
>
>> Robert Kudyba <rk...@fordham.edu> wrote:
>>> Over the past few days sending mail via SquirrelMail has become glacial. The load on the server is under 1. I've restarted the SA, sendmail and dovecot processes several times. Here are
>>> some logs I can provide any settings if desired.
>
> tried to run a message through "spamassassin -D" ?
> that should give you debug/timing info.
OK here is the pastebin of spamassassin -D < gtube.txt: https://pastebin.com/iZtm2hhy
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/
SquirrelMail?
Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
>Robert Kudyba <rk...@fordham.edu> wrote:
>> Over the past few days sending mail via SquirrelMail has become glacial. The load on the server is under 1. I've restarted the SA, sendmail and dovecot processes several times. Here are
>> some logs I can provide any settings if desired.
tried to run a message through "spamassassin -D" ?
that should give you debug/timing info.
>> Jul 13 23:03:24 storm sendmail[14504]: v6E33EOQ014504: Authentication-Warning: our-domain: apache set sender to me@our-domain using -f
>> Jul 13 23:03:39 storm sendmail[14504]: v6E33EOQ014504:
>> from=me@our-domain, size=535, class=0, nrcpts=1,
>> msgid=<9c...@our-domain>,
>> relay=apache@localhost
On 14.07.17 06:10, Andrzej A. Filip wrote:
>n*5s delay *may* indicate unresponsive DNS host(s)/resolver(s) in /etc/hots
you apparently mean in /etc/resolv.conf
>How long does it take to get SMTP greeting message when you start
>"/usr/sbin/sendmail -bs" as a non root user?
>[ Is it sendmail startup or message processing? ]
>
>> [...]
>> Jul 13 23:04:05 storm spamd[13378]: spamd: processing message <9c...@our-domain> for root:1001
>> Jul 13 23:04:20 storm spamd[13378]: spamd: clean message (-101.5/5.0) for root:1001 in 15.0 seconds, 1193 bytes.
>> Jul 13 23:04:20 storm spamd[13378]: spamd: result: . -101 - ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST
>> scantime=15.0 [...]
>
>Hitting PYZOR_CHECK is scary.
not at all. well, it MAY cause some delay but the default pyzor timeout is
3.5 seconds
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Posli tento mail 100 svojim znamim - nech vidia aky si idiot
Send this email to 100 your friends - let them see what an idiot you are
Re: reason why sendmail w/ SA3.4.1 scantime=15.0, delay=00:01:06 w/ SquirrelMail?
Posted by "Andrzej A. Filip" <an...@gmail.com>.
Robert Kudyba <rk...@fordham.edu> wrote:
> Over the past few days sending mail via SquirrelMail has become glacial. The load on the server is under 1. I've restarted the SA, sendmail and dovecot processes several times. Here are
> some logs I can provide any settings if desired.
>
> Jul 13 23:03:24 storm sendmail[14504]: v6E33EOQ014504: Authentication-Warning: our-domain: apache set sender to me@our-domain using -f
> Jul 13 23:03:39 storm sendmail[14504]: v6E33EOQ014504:
> from=me@our-domain, size=535, class=0, nrcpts=1,
> msgid=<9c...@our-domain>,
> relay=apache@localhost
n*5s delay *may* indicate unresponsive DNS host(s)/resolver(s) in /etc/hots
[ at least it should be ruled out ]
How long does it take to get SMTP greeting message when you start
"/usr/sbin/sendmail -bs" as a non root user?
[ Is it sendmail startup or message processing? ]
> [...]
> Jul 13 23:04:05 storm spamd[13378]: spamd: processing message <9c...@our-domain> for root:1001
> Jul 13 23:04:20 storm spamd[13378]: spamd: clean message (-101.5/5.0) for root:1001 in 15.0 seconds, 1193 bytes.
> Jul 13 23:04:20 storm spamd[13378]: spamd: result: . -101 - ALL_TRUSTED,BAYES_00,PYZOR_CHECK,USER_IN_WHITELIST
> scantime=15.0 [...]
Hitting PYZOR_CHECK is scary.
--
A. Filip