I bumped the 3 timeouts up to 15 minutes and it appears, just at a cursory examination, to now have more time outs (about 8 per hour versus about 4 per hour previously). We are going step by step cleaning up spam assassin rules, removing any alternate SA cf files, testing with spamassassin --lint, etc.
The crux of this issue appeared only after we upgraded to SA 3.0 and it implemented bayes. We are examining our mimedefang filter...the test option shows that it is appears ok. For some reason mail is still being rejected when the filter times out...is there a way to allow the mail through instead of rejecting it if the filter times out? We removed the F=T flag in the mc but this didn't seem to help. It would at least buy us some time to hunt this down more. We upgraded 2 weeks ago to the latest NAI sigs and the problem appeared to go away. After upgrading last week and this week the problem has seemed to reappear. Whether or not there is a correlation we have been unable to determine. Thanks, Shawn -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David F. Skoll Sent: Tuesday, November 02, 2004 9:00 AM To: [EMAIL PROTECTED] Subject: Re: [Mimedefang] slaves On Tue, 2 Nov 2004, Aleksandar Milivojevic wrote: > It depends on how large messages you are accepting. If you set limit to > say 1 or 10MB, than 15 minutes is way too much. I don't think so. If you plot scan times on a busy server, you'll see that most are quite short, but there are a small (but significant) number of outliers that can take a very long time to scan -- even for relatively small messages. It drives me crazy :-), but we see it on our server. I think SpamAssassin's massive amount of regexp manipulation is very sensitive to the actual data it scans; the regexp execution time seems almost non-deterministic. Regards, David. _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
