I've been having an intermittent problem with simscan/spamd/clamav. The
bottom line is that duplicates messages are received. I experienced the
problem with toaster1.2, and I'm currently running toaster1.3 on CentOS4.3.
The smtp session apparently stalls and eventually times out. Since the
session wasn't completed successfully, the sender then resends the
email. Typically, it stalls again.
When I stop and start qmail again, things clear up for a while, and mail
flows unhindered.
I notice on occasion that spamd runs for a couple minutes and in a cpu
bound state (97% cpu on top). I don't know if these are unusually long
emails being scanned or not. spamd goes away, but then it is still some
time before the smtp session times out. The timeout is usually 5 or 10
minutes, according to the simscan report in the received mail headers.
Most messages are scanned in 2-10 seconds, while the problem ones are
typically 300+ or 600+ seconds. The machine is not under a load, except
when spamd is running.
I've isolated an example and here's a diff of the two messages:
[EMAIL PROTECTED] qmail-toaster]$ diff mail-dupe mail-ok
1c1
< From - Wed Aug 2 07:32:58 2006
---
> From - Wed Aug 2 07:34:58 2006
3c3
< X-UIDL: 1154529224.8812.doris,S=2192
---
> X-UIDL: 1154529308.8854.doris,S=2198
8,9c8,9
< Received: (qmail 8810 invoked by uid 89); 2 Aug 2006 14:33:44 -0000
< Received: by simscan 1.2.0 ppid: 8679, pid: 8680, t: 302.5537s
---
> Received: (qmail 8846 invoked by uid 89); 2 Aug 2006 14:35:07 -0000
> Received: by simscan 1.2.0 ppid: 8839, pid: 8840, t: 1.4316s
13c13
< X-Spam-Status: No, score=0.4 required=5.0 tests=AWL autolearn=ham
---
> X-Spam-Status: No, score=0.3 required=5.0 tests=AWL autolearn=unavailable
16c16
< by doris with (DHE-RSA-AES256-SHA encrypted) SMTP; 2 Aug 2006
14:28:41 -0000---
> by doris with (DHE-RSA-AES256-SHA encrypted) SMTP; 2 Aug 2006
14:35:05 [EMAIL PROTECTED] qmail-toaster]$
I'm using all the default toaster settings. It appears that successful
emails have autolearn=unavailable, while unsuccessful ones have
autolearn=ham. Why would this vary from message to message? I don't know
if this is a problem or not.
I also notice that when the session times out at 600+s, there is no
X-Spam-Status in the message header, leading me to believe that it might
be spamd that got hung up (or something earlier in the process).
Any ideas what to check/try?
--
-Eric 'shubes'
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
