Thank you for the quick reply.
> First you take dspam out of your chain to get email flowing again, then > you start looking for the error. Email is too slow for a realtime fix. I am not sure exactly how to do this. Hummm that was over a year ago. :-( I know I set procmail as my LDA and am using postfix. > What other messages show up in /var/log/* around the time of the failed > deliveries? Here is the first instance of the message appearing in my logs. I've included the message before that went through: Apr 3 13:55:49 simnasa postfix/local[30633]: EAE1C380FDD: to=<[EMAIL PROTECTED]>, orig_to=<[EMAIL PROTECTED]>, relay=local, delay=1, status=sent (delivered to command: /usr/local/bin/dspam --deliver=innocent --user $USER) Apr 3 13:55:49 atmydomain postfix/qmgr[12511]: EAE1C380FDD: removed Apr 3 13:55:54 atmydomain postfix/smtpd[30782]: disconnect from asmail5.u-netsurf.ne.jp[202.233.3.12] Apr 3 13:55:56 atmydomain postfix/smtpd[30628]: connect from ns.tbnsoft.ru[87.245.155.130] Apr 3 13:55:57 atmydomain postfix/smtpd[30628]: 717F5380EC8: client=ns.tbnsoft.ru[87.245.155.130] Apr 3 13:55:57 atmydomain postfix/cleanup[30630]: 717F5380EC8: message-id=<[EMAIL PROTECTED]> Apr 3 13:55:58 atmydomain postfix/smtpd[30628]: disconnect from ns.tbnsoft.ru[87.245.155.130] Apr 3 13:55:58 atmydomain postfix/qmgr[12511]: 717F5380EC8: from=<>, size=13426, nrcpt=1 (queue active) Apr 3 13:55:59 atmydomain postfix/local[30631]: 717F5380EC8: to=<[EMAIL PROTECTED]>, orig_to=<[EMAIL PROTECTED]>, relay=local, delay=2, status=deferred (Command died with signal 11: "/usr/local/bin/dspam --deliver=innocent --user $USER") > Something must have changed. If you upgraded other parts of your system, > but not dspam, you might need to recompile. Check with the command 'ldd > /usr/local/sbin/dspam' (or wherever the dspam executable lives). You > will see the libraries dspam loads. Did any of them change recently ? If > so, recompile dspam against the new libs. I have changed nothing. No software additions, no modifications. I did send a message for dspam to learn about spam message that it missed on the day this happend. (i.e. [EMAIL PROTECTED]) but that shouldn't cause this issue should it? If so, how do I fix that? > If the libraries have not changed, some part that dspam calls or > executes is failing. Are the data tables ok? Move all data (tokens) out > of the way and do a fresh install. If that works, your old setup got > corrupted somehow. Some guru on this list can probably help you fix > that, but starting afresh might be easier depending on your skill level. If my old data got corrupt, how do I get the messages? Are you saying I should move all the information in my /var/dspam/data directory someplace else? I really appreciate all the help. Brad
