On Thu, Jul 30, 2009 at 04:32:42PM +0200, Lukas Czerner wrote:
> Spamd stuck on some emails. Its running just fine until 
> 
> 15:25:40 spamd[23736]: rules: ran body rule __HAS_ANY_EMAIL ======> got hit: 
> "[email protected]"
> 
> then it just load processor to max, for approximately 40 minutes and
> 
> 16:02:14 spamd[23736]: rules: failed to run TVD_STOCK1 test, skipping:

I've seen this same log message, but never associated with the symptoms
you're describing.  If you disable this rule completely, by giving it a
score of 0 in local.cf, do you still experience hangs?

> Good thing is, that it actually do not run forever, but I can imagine
> that more of those messages successfully block spamassassin for a very
> long time. Unfortunately we dont have any of those email whose causing
> problems, but we have tcpdump of comunication with exim...so is there
> some way to retrive relevant information from it ? 

I don't know of a convenient way to extract the message.  What I'd
probably do is open the pcap file in wireshark and use it's "Follow TCP
Stream" function to assemble the conversation back into plain text.
Then I'd copy & paste the relevant parts into a file that could be fed
to spamassassin for testing.

noah

Attachment: signature.asc
Description: Digital signature

Reply via email to