You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Tim Litwiller <ti...@litwiller.net> on 2004/07/05 17:58:09 UTC

I just noticed an error when tailing my maillog file

I'm not sure how long this has been happening .

So I uninstalled the rpms and reinstalled - I'm still getting

 razor2 check skipped: Connection refused IO::Socket::INET: Timeout at 
/usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Dns.pm line 409.



Re: I just noticed an error when tailing my maillog file

Posted by Tim Litwiller <ti...@litwiller.net>.
as far as I can tell the firewall is configured correctly

here is the output  from razor-admin and spamassassin -D --lint

# razor-admin -discover -d
Razor-Log: Computed razorhome from env: /root/.razor
 Razor-Log: Found razorhome: /root/.razor
 Razor-Log: read_file: 15 items read from /root/.razor/razor-agent.conf
 Razor-Log:  -discover will force discvery for all .lst
Jul 05 13:21:49.075473 admin[4826]: [ 1] [bootup] Logging initiated 
LogDebugLevel=9 to stdout
Jul 05 13:21:49.076882 admin[4826]: [ 5] computed 
razorhome=/root/.razor, conf=/root/.razor/razor-agent.conf, 
ident=/root/.razor/identity-crobinson
Jul 05 13:21:49.077147 admin[4826]: [ 2]  Razor-Agents v2.20 starting 
razor-admin -discover -d
Jul 05 13:21:49.099511 admin[4826]: [ 9] uname -a: Linux mail 2.4.18-5 
#1 Mon Jun 10 15:31:48 EDT 2002 i686 unknown
Jul 05 13:21:49.114336 admin[4826]: [ 5] read_file: 1 items read from 
/root/.razor/servers.discovery.lst
Jul 05 13:21:49.123633 admin[4826]: [ 5] read_file: 2 items read from 
/root/.razor/servers.nomination.lst
Jul 05 13:21:49.131375 admin[4826]: [ 5] read_file: 3 items read from 
/root/.razor/servers.catalogue.lst
Jul 05 13:21:49.132092 admin[4826]: [ 9] Assigning defaults to 
joy.cloudmark.com
Jul 05 13:21:49.132454 admin[4826]: [ 9] Assigning defaults to 
folly.cloudmark.com
Jul 05 13:21:49.132855 admin[4826]: [ 9] Assigning defaults to 
wonder.cloudmark.com
Jul 05 13:21:49.133197 admin[4826]: [ 9] Assigning defaults to 
pride.cloudmark.com
Jul 05 13:21:49.133567 admin[4826]: [ 9] Assigning defaults to 
thrill.cloudmark.com
Jul 05 13:21:49.142002 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.truth.cloudmark.com.conf
Jul 05 13:21:49.142896 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.truth.cloudmark.com.conf
Jul 05 13:21:49.152174 admin[4826]: [ 5] read_file: 12 items read from 
/root/.razor/server.stress.cloudmark.com.conf
Jul 05 13:21:49.152965 admin[4826]: [ 5] read_file: 12 items read from 
/root/.razor/server.stress.cloudmark.com.conf
Jul 05 13:21:49.162183 admin[4826]: [ 5] read_file: 13 items read from 
/root/.razor/server.folly.cloudmark.com.conf
Jul 05 13:21:49.162995 admin[4826]: [ 5] read_file: 13 items read from 
/root/.razor/server.folly.cloudmark.com.conf
Jul 05 13:21:49.164616 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.joy.cloudmark.com.conf
Jul 05 13:21:49.165397 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.joy.cloudmark.com.conf
Jul 05 13:21:49.175686 admin[4826]: [ 5] read_file: 16 items read from 
/root/.razor/server.pride.cloudmark.com.conf
Jul 05 13:21:49.176734 admin[4826]: [ 5] read_file: 16 items read from 
/root/.razor/server.pride.cloudmark.com.conf
Jul 05 13:21:49.178397 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.prejudice.cloudmark.com.conf
Jul 05 13:21:49.179096 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.prejudice.cloudmark.com.conf
Jul 05 13:21:49.184002 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.anxiety.cloudmark.com.conf
Jul 05 13:21:49.184904 admin[4826]: [ 5] read_file: 14 items read from 
/root/.razor/server.anxiety.cloudmark.com.conf
Jul 05 13:21:49.194037 admin[4826]: [ 5] read_file: 16 items read from 
/root/.razor/server.thrill.cloudmark.com.conf
Jul 05 13:21:49.194872 admin[4826]: [ 5] read_file: 16 items read from 
/root/.razor/server.thrill.cloudmark.com.conf
Jul 05 13:21:49.206996 admin[4826]: [ 5] read_file: 16 items read from 
/root/.razor/server.wonder.cloudmark.com.conf
Jul 05 13:21:49.207769 admin[4826]: [ 5] read_file: 16 items read from 
/root/.razor/server.wonder.cloudmark.com.conf
Jul 05 13:21:49.208358 admin[4826]: [ 5] 113888 seconds before closest 
server discovery
Jul 05 13:21:49.208644 admin[4826]: [ 5] forcing discovery
Jul 05 13:21:49.209042 admin[4826]: [ 7] 322237 seconds before soonest 
DNS discovery
Jul 05 13:21:49.209268 admin[4826]: [ 5] forcing DNS discovery
Jul 05 13:21:49.209488 admin[4826]: [ 5] Finding Discovery Servers via 
DNS in the razor2.cloudmark.com zone
Jul 05 13:21:49.608769 admin[4826]: [ 6] Found 1 Discovery Servers via 
DNS in the razor2.cloudmark.com zone
Jul 05 13:21:49.609181 admin[4826]: [ 8] Checking with Razor Discovery 
Server 66.151.150.12
Jul 05 13:21:49.609507 admin[4826]: [ 6] No proper port specified, using 
2703
Jul 05 13:21:49.609880 admin[4826]: [ 5] Connecting to 66.151.150.12 ...
Jul 05 13:21:49.761335 admin[4826]: [ 8] Connection established
Jul 05 13:21:49.761619 admin[4826]: [ 4] 66.151.150.12 >> 35 server 
greeting: sn=D&srl=434&a=l&a=cg&ep4=7542-10
Jul 05 13:21:49.762026 admin[4826]: [ 4] 66.151.150.12 << 12
Jul 05 13:21:49.762205 admin[4826]: [ 6] a=g&pm=csl
Jul 05 13:21:49.838987 admin[4826]: [ 4] 66.151.150.12 >> 76
Jul 05 13:21:49.839174 admin[4826]: [ 6] response to sent.1
-csl=?
pride.cloudmark.com
wonder.cloudmark.com
thrill.cloudmark.com
.
Jul 05 13:21:49.839533 admin[4826]: [ 8] Discovery Server 66.151.150.12 
replying with csl=pride.cloudmark.com
Jul 05 13:21:49.839707 admin[4826]: [ 8] Discovery Server 66.151.150.12 
replying with csl=wonder.cloudmark.com
Jul 05 13:21:49.839849 admin[4826]: [ 8] Discovery Server 66.151.150.12 
replying with csl=thrill.cloudmark.com
Jul 05 13:21:49.840176 admin[4826]: [ 4] 66.151.150.12 << 12
Jul 05 13:21:49.840335 admin[4826]: [ 6] a=g&pm=nsl
Jul 05 13:21:49.917322 admin[4826]: [ 4] 66.151.150.12 >> 51
Jul 05 13:21:49.917504 admin[4826]: [ 6] response to sent.2
-nsl=?
joy.cloudmark.com
folly.cloudmark.com
.
Jul 05 13:21:49.917803 admin[4826]: [ 8] Discovery Server 66.151.150.12 
replying with nsl=joy.cloudmark.com
Jul 05 13:21:49.917966 admin[4826]: [ 8] Discovery Server 66.151.150.12 
replying with nsl=folly.cloudmark.com
Jul 05 13:21:50.404444 admin[4826]: [ 5] Sorted (closest first) list of 
catalogue (csl) servers & RTTs:141.7ms wonder.cloudmark.com, 143.1ms 
thrill.cloudmark.com, 145.7ms pride.cloudmark.com
Jul 05 13:21:50.702017 admin[4826]: [ 5] Sorted (closest first) list of 
nomination (nsl) servers & RTTs:141.9ms joy.cloudmark.com, 153.4ms 
folly.cloudmark.com
Jul 05 13:21:50.703014 admin[4826]: [ 5] wrote 1 ARRAY items to file: 
/root/.razor/servers.discovery.lst
Jul 05 13:21:50.703717 admin[4826]: [ 5] wrote 3 ARRAY items to file: 
/root/.razor/servers.catalogue.lst
Jul 05 13:21:50.704404 admin[4826]: [ 5] wrote 2 ARRAY items to file: 
/root/.razor/servers.nomination.lst
Jul 05 13:21:50.704819 admin[4826]: [ 6] joy.cloudmark.com is a 
Nomination Server srl 4000; computed min_cf=0, Server se: 58
Jul 05 13:21:50.705174 admin[4826]: [ 8] Computed supported_engines: 4
Jul 05 13:21:50.705391 admin[4826]: [ 8] Using next closest server 
joy.cloudmark.com:2703, cached info srl 4000
Jul 05 13:21:50.705552 admin[4826]: [ 8] razor-admin finished successfully.

and

# spamassassin -D --lint
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/usr/X11R6/bin', keeping.
debug: PATH included '/root/bin', which doesn't exist, dropping.
debug: Final PATH set to: 
/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin
debug: ignore: using a test message to lint rules
debug: using "/usr/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: using "/root/.spamassassin" for user state dir
debug: bayes: 8149 tie-ing to DB file R/O /root/.spamassassin/bayes_toks
debug: bayes: 8149 tie-ing to DB file R/O /root/.spamassassin/bayes_seen
debug: bayes: found bayes db version 2
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 8149 untie-ing
debug: bayes: 8149 untie-ing db_toks
debug: bayes: 8149 untie-ing db_seen
debug: Score set 1 chosen.
debug: Initialising learner
debug: using "/root/.spamassassin" for user state dir
debug: bayes: 8149 tie-ing to DB file R/O /root/.spamassassin/bayes_toks
debug: bayes: 8149 tie-ing to DB file R/O /root/.spamassassin/bayes_seen
debug: bayes: found bayes db version 2
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 8149 untie-ing
debug: bayes: 8149 untie-ing db_toks
debug: bayes: 8149 untie-ing db_seen
debug: is Net::DNS::Resolver available? yes
debug: trying (3) kernel.org...
debug: looking up MX for 'kernel.org'
debug: MX for 'kernel.org' exists? 1
debug: MX lookup of kernel.org succeeded => Dns available (set 
dns_available to hardcode)
debug: is DNS available? 1
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=1.92
debug: Razor2 is available
debug: entering helper-app run mode
 Razor-Log: Computed razorhome from env: /root/.razor
 Razor-Log: Found razorhome: /root/.razor
 Razor-Log: read_file: 15 items read from /root/.razor/razor-agent.conf
Jul 05 13:31:51.786479 check[8149]: [ 1] [bootup] Logging initiated 
LogDebugLevel=9 to stdout
Jul 05 13:31:51.787563 check[8149]: [ 5] computed 
razorhome=/root/.razor, conf=/root/.razor/razor-agent.conf, 
ident=/root/.razor/identity-crobinson
Jul 05 13:31:51.787976 check[8149]: [ 8] Client supported_engines: 1 2 3 4
Jul 05 13:31:51.788610 check[8149]: [ 8]  prep_mail done: mail 1 
headers=93, mime0=1376
Jul 05 13:31:51.789337 check[8149]: [ 5] read_file: 1 items read from 
/root/.razor/servers.discovery.lst
Jul 05 13:31:51.790238 check[8149]: [ 5] read_file: 2 items read from 
/root/.razor/servers.nomination.lst
Jul 05 13:31:51.790982 check[8149]: [ 5] read_file: 3 items read from 
/root/.razor/servers.catalogue.lst
Jul 05 13:31:51.791677 check[8149]: [ 9] Assigning defaults to 
joy.cloudmark.com
Jul 05 13:31:51.792116 check[8149]: [ 9] Assigning defaults to 
folly.cloudmark.com
Jul 05 13:31:51.792494 check[8149]: [ 9] Assigning defaults to 
wonder.cloudmark.com
Jul 05 13:31:51.792854 check[8149]: [ 9] Assigning defaults to 
thrill.cloudmark.com
Jul 05 13:31:51.793211 check[8149]: [ 9] Assigning defaults to 
pride.cloudmark.com
Jul 05 13:31:51.794537 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.truth.cloudmark.com.conf
Jul 05 13:31:51.795475 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.truth.cloudmark.com.conf
Jul 05 13:31:51.796400 check[8149]: [ 5] read_file: 12 items read from 
/root/.razor/server.stress.cloudmark.com.conf
Jul 05 13:31:51.797320 check[8149]: [ 5] read_file: 12 items read from 
/root/.razor/server.stress.cloudmark.com.conf
Jul 05 13:31:51.798231 check[8149]: [ 5] read_file: 13 items read from 
/root/.razor/server.folly.cloudmark.com.conf
Jul 05 13:31:51.799080 check[8149]: [ 5] read_file: 13 items read from 
/root/.razor/server.folly.cloudmark.com.conf
Jul 05 13:31:51.800258 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.joy.cloudmark.com.conf
Jul 05 13:31:51.801179 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.joy.cloudmark.com.conf
Jul 05 13:31:51.802158 check[8149]: [ 5] read_file: 16 items read from 
/root/.razor/server.pride.cloudmark.com.conf
Jul 05 13:31:51.803030 check[8149]: [ 5] read_file: 16 items read from 
/root/.razor/server.pride.cloudmark.com.conf
Jul 05 13:31:51.803949 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.prejudice.cloudmark.com.conf
Jul 05 13:31:51.804884 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.prejudice.cloudmark.com.conf
Jul 05 13:31:51.805900 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.anxiety.cloudmark.com.conf
Jul 05 13:31:51.806804 check[8149]: [ 5] read_file: 14 items read from 
/root/.razor/server.anxiety.cloudmark.com.conf
Jul 05 13:31:51.807826 check[8149]: [ 5] read_file: 16 items read from 
/root/.razor/server.thrill.cloudmark.com.conf
Jul 05 13:31:51.808852 check[8149]: [ 5] read_file: 16 items read from 
/root/.razor/server.thrill.cloudmark.com.conf
Jul 05 13:31:51.810084 check[8149]: [ 5] read_file: 16 items read from 
/root/.razor/server.wonder.cloudmark.com.conf
Jul 05 13:31:51.811030 check[8149]: [ 5] read_file: 16 items read from 
/root/.razor/server.wonder.cloudmark.com.conf
Jul 05 13:31:51.811588 check[8149]: [ 5] 162543 seconds before closest 
server discovery
Jul 05 13:31:51.812102 check[8149]: [ 6] wonder.cloudmark.com is a 
Catalogue Server srl 5007; computed min_cf=6, Server se: D8
Jul 05 13:31:51.812489 check[8149]: [ 8] Computed supported_engines: 4
Jul 05 13:31:51.812829 check[8149]: [ 8] Using next closest server 
wonder.cloudmark.com:2703, cached info srl 5007
Jul 05 13:31:51.813190 check[8149]: [ 8] mail 1 has no subject
Jul 05 13:31:51.814850 check[8149]: [ 6] preproc: mail 1.0 went from 
1376 bytes to 1339
Jul 05 13:31:51.815148 check[8149]: [ 6] computing sigs for mail 1.0, 
len 1339
Jul 05 13:31:51.816979 check[8149]: [ 6] skipping whitelist file 
(empty?): /root/.razor/razor-whitelist
Jul 05 13:31:51.817317 check[8149]: [ 5] Connecting to 
wonder.cloudmark.com ...
Jul 05 13:31:51.991428 check[8149]: [ 8] Connection established
Jul 05 13:31:51.991806 check[8149]: [ 4] wonder.cloudmark.com >> 36 
server greeting: sn=C&srl=5007&a=l&a=cg&ep4=7542-10
Jul 05 13:31:51.992446 check[8149]: [ 6] wonder.cloudmark.com is a 
Catalogue Server srl 5007; computed min_cf=6, Server se: D8
Jul 05 13:31:51.992915 check[8149]: [ 8] Computed supported_engines: 4
Jul 05 13:31:51.993298 check[8149]: [ 8] mail 1.0 e4 sig: 
xFaZIZUVHk90OQfARnenjx5BZTMA
Jul 05 13:31:51.993701 check[8149]: [ 8] preparing 1 queries
Jul 05 13:31:51.994103 check[8149]: [ 8] sending 1 batches
Jul 05 13:31:51.994612 check[8149]: [ 4] wonder.cloudmark.com << 52
Jul 05 13:31:51.994873 check[8149]: [ 6] 
a=c&e=4&ep4=7542-10&s=xFaZIZUVHk90OQfARnenjx5BZTMA
Jul 05 13:31:52.200273 check[8149]: [ 4] wonder.cloudmark.com >> 5
Jul 05 13:31:52.200553 check[8149]: [ 6] response to sent.1
p=0
Jul 05 13:31:52.201236 check[8149]: [ 6] mail 1.0 e=4 
sig=xFaZIZUVHk90OQfARnenjx5BZTMA: sig not found.
Jul 05 13:31:52.201533 check[8149]: [ 7] method 4: mail 1.0: 
no-contention part, spam=0
Jul 05 13:31:52.201854 check[8149]: [ 7] method 4: mail 1: all 
non-contention parts not spam, mail not spam
Jul 05 13:31:52.202057 check[8149]: [ 3] mail 1 is not known spam.
Jul 05 13:31:52.202283 check[8149]: [ 5] disconnecting from server 
wonder.cloudmark.com
Jul 05 13:31:52.202712 check[8149]: [ 4] wonder.cloudmark.com << 5
Jul 05 13:31:52.202946 check[8149]: [ 6] a=q
debug: Using results from Razor v2.20
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0  highest cf score: 0
debug: running raw-body-text per-line regexp tests; score so far=1.92
debug: running uri tests; score so far=1.92
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=1.92
debug: Razor2 is available
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Current PATH is: 
/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin
debug: executable for dccproc was found at /usr/local/bin/dccproc
debug: DCC is available: /usr/local/bin/dccproc
debug: entering helper-app run mode
debug: DCC: got response: X-DCC-servers-Metrics: mail 1049; Body=6036 
Fuz1=572058 Fuz2=572056
debug: leaving helper-app run mode
debug: executable for pyzor was found at /usr/bin/pyzor
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: Pyzor: got response: 66.250.40.33:24441  (200, 'OK')     0       0
debug: leaving helper-app run mode
debug: all '*To' addrs:
debug: RBL: success for 1 of 1 queries
debug: running meta tests; score so far=1.92
debug: is spam? score=1.92 required=5 
tests=DATE_MISSING,NO_REAL_NAME,RM_tl_ToNone




Michael Moyse wrote:

> Tim Litwiller wrote:
>
>> I'm not sure how long this has been happening .
>>
>> So I uninstalled the rpms and reinstalled - I'm still getting
>>
>> razor2 check skipped: Connection refused IO::Socket::INET: Timeout at 
>> /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Dns.pm line 409.
>>
>>
> Firewall?
>
> "A connection to Razor server on the internet is made on TCP port 7 
> and TCP port 2703. You may need to configure your firewall to open 
> this ports for outgoing traffic.
> You need to restart the SpamAssassin daemon to load the new 
> configuration."
>



Re: I just noticed an error when tailing my maillog file

Posted by Michael Moyse <mi...@michaelmoyse.co.uk>.
Tim Litwiller wrote:

> I'm not sure how long this has been happening .
>
> So I uninstalled the rpms and reinstalled - I'm still getting
>
> razor2 check skipped: Connection refused IO::Socket::INET: Timeout at 
> /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Dns.pm line 409.
>
>
Firewall?

"A connection to Razor server on the internet is made on TCP port 7 and 
TCP port 2703. You may need to configure your firewall to open this 
ports for outgoing traffic.
You need to restart the SpamAssassin daemon to load the new configuration."

Re: I just noticed an error when tailing my maillog file

Posted by Matt Kettler <mk...@comcast.net>.
At 10:58 AM 7/5/04 -0500, Tim Litwiller wrote:

>I'm not sure how long this has been happening .
>
>So I uninstalled the rpms and reinstalled - I'm still getting
>
>razor2 check skipped: Connection refused IO::Socket::INET: Timeout at 
>/usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Dns.pm line 409.

Is your firewall configured properly to allow your mailserver to connect to 
both tcp/7 and tcp/2307 on the razor servers?