RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Gary Funck
David F. Skoll wrote: > https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=116192 > > That wasn't a locking bug. It was a weird bug whereby Berkeley DB > would, for no reason at all, sleep for one second whenever it needed > to allocate memory! > > It's still present in Fedora Core 1, I believ

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Wesley Peters
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of David > F. Skoll > Sent: Wednesday, January 18, 2006 12:22 PM > To: mimedefang@lists.roaringpenguin.com > Subject: Re: [Mimedefang] BIG problems with mimedefang > > > Lisa Casey wrote: > > [classic sym

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Gary Funck
David F. Skoll wrote: > > Could you be thinking of this bug? > > https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=116192 > > That wasn't a locking bug. It was a weird bug whereby Berkeley DB > would, for no reason at all, sleep for one second whenever it needed > to allocate memory! > > I

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread David F. Skoll
Gary Funck wrote: > If I recall correctly, 2/3 years ago, there was a particular version > of the Berkeley DB implementation that was bugging, esp. with respect > to locking (or lack thereof). It might've been in the Perl DB wrapper. Could you be thinking of this bug? https://bugzilla.redhat.co

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Gary Funck
David F. Skoll wrote: > Sent: Wednesday, January 18, 2006 5:37 PM > > If that's the case, SpamAssassin has a seriously broken BerkeleyDB Bayes > implementation. > If I recall correctly, 2/3 years ago, there was a particular version of the Berkeley DB implementation that was bugging, esp. with

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread David F. Skoll
[EMAIL PROTECTED] wrote: > Once you get beyond a certain traffic level the BerkeleyDB > implementation of the Bayes database becomes a bottleneck and you > need to move to a SQL-daemon database. If that's the case, SpamAssassin has a seriously broken BerkeleyDB Bayes implementation. In CanIt, we

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Matthew.van.Eerde
Lisa Casey wrote: > To delete the bayes database do I just delete > /var/spool/spamassassin/bayes_seen > /var/spool/spamassassin/bayes_toks > /var/spool/spamassassin/_seen > /var/spool/spamassassin/_toks Well, whatever your bayes_path is set to... (note it's not really a path, really more of a fi

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread David F. Skoll
Gary Funck wrote: > Might be a good guess, but why did this suddenly start becoming > a problem? The OP was probably just lucky until now. :-) > Can the > mimedefang "master" somehow start the slaves so they can > later be debugged, or is there a related technique? You can strace them, but ther

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Gary Funck
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of David > F. Skoll > Sent: Wednesday, January 18, 2006 2:03 PM > To: mimedefang@lists.roaringpenguin.com > Subject: Re: [Mimedefang] BIG problems with mimedefang > > > Gary Funck wrote: > > > Lisa Casey

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread David F. Skoll
Gary Funck wrote: > Lisa Casey wrote: >> 11859 defang 10 0 30572 20M 1852 D 6.3 4.0 0:10 mimedefang.pl >> 11657 defang 10 0 30172 9252 1820 D 3.0 1.8 0:07 mimedefang.pl >> 11652 defang 9 0 29184 8400 1832 D 2.9 1.6 0:07 mimedefang.pl > Try running strace on one of those busy slaves to see what >

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Gary Funck
> From: Lisa Casey > Sent: Wednesday, January 18, 2006 12:02 PM > To: mimedefang@lists.roaringpenguin.com > Subject: [Mimedefang] BIG problems with mimedefang > > > Hi, > > I'm running Redhat 7.2 This computer functions as a Radius > server (cistron > radius 1.6.7) and as a mail server (se

Re: [Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread David F. Skoll
Philip Prindeville wrote: > Give me 3 hours to bang out some updates to the man page. No need; I already did it. Regards, David. ___ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore i

[Mimedefang] SOT: Net::CIDR::Lite

2006-01-18 Thread Philip Prindeville
I was looking at this module, and noticed a couple of short-comings. (1) it doesn't return a failure code, only blurts a message via "confess" with things go wrong; (2) it doesn't allow you to save a pointer into each address block/range and then retrieve it later and allow you to use it as

Re: [Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread Philip Prindeville
Give me 3 hours to bang out some updates to the man page. -Philip MIMEDefang 2.55-BETA-3 is available at http://www.mimedefang.org/node.php?id=1 The biggest change since BETA-2 is support for the filter_helo function, courtesy of Philip Prindeville. Please note that in my tests with Sendmail

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Lisa Casey
Hi, . . . I have seen the same thing happen when the SA Bayes database gets corrupt. Basically, SA hangs until MD times it out which causes the whole slave to hang. Maybe someone here can give you a better solution, but mine was to delete the database and relearn all my corpus. SA rebuilds ne

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Mike Patchen
> Hi, > > I'm running Redhat 7.2 This computer functions as a Radius server (cistron > radius 1.6.7) and as a mail server (sendmail 8.12.6) which also runs > MIMEDefang 2.48 and SpamAssassin version 3.0.1 running on Perl version > 5.8.5. > . . . I have seen the same thing happen when the SA Baye

Re: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread David F. Skoll
Lisa Casey wrote: [classic symptoms of an overloaded system.] First question: do you have /var/spool/MIMEDefang on a RAMdisk? If not, fix it now! Next: It looks like you have 512MB of memory. You don't want to increase MX_MAXIMUM much beyond around 20, or the server will start swapping. How m

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > Lisa Casey wrote: >> Mem: 512900K av, 509840K used, 3060K free, 0K shrd, 1800K buff >> Swap: 522072K av, 520104K used, 1968K free 5204K cached >> PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME COMMAND ... >> 11859 defang 10 0 30572 20M 1852 D 6.3 4.0 0:10 mimedefang.p

RE: [Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Matthew.van.Eerde
Lisa Casey wrote: > I discovered > that my max slaves was set to 10 and increased that to 30 hoping that > would solve the problem. It hasn't. Here's what I'm seeing. Things > will be going along ok, then suddenly the server load will shoot up > from 0.something to over 30! When that happens mail

RE: [Mimedefang] Stream_by_domain

2006-01-18 Thread Matthew.van.Eerde
Matthew van Eerde wrote: > Kris Deugau wrote: >> [EMAIL PROTECTED] wrote: >>> I may be able to get them. How well does RHEL 3 handle 50 addresses >>> bound to one NIC? >> >> I should note that this does NOTHING to help or hinder with respect >> to multi-domain emails; everything still travels th

[Mimedefang] BIG problems with mimedefang

2006-01-18 Thread Lisa Casey
Hi, I'm running Redhat 7.2 This computer functions as a Radius server (cistron radius 1.6.7) and as a mail server (sendmail 8.12.6) which also runs MIMEDefang 2.48 and SpamAssassin version 3.0.1 running on Perl version 5.8.5. This setup has been working great up until this past weekend. I

RE: [Mimedefang] Stream_by_domain

2006-01-18 Thread Matthew.van.Eerde
Kris Deugau wrote: > [EMAIL PROTECTED] wrote: >> I may be able to get them. How well does RHEL 3 handle 50 addresses >> bound to one NIC? > > I should note that this does NOTHING to help or hinder with respect to > multi-domain emails; everything still travels through a single > sendmail/mimedef

Re: [Mimedefang] Stream_by_domain

2006-01-18 Thread Les Mikesell
On Wed, 2006-01-18 at 12:59, Kris Deugau wrote: > From experience I can say that RH7.3 handles that just fine (actually, > at one point that box had 200 IPs bound to one NIC). WBEL should be > pretty much the same. > > It *does* get a little loopy about outbound connections of any knd > thou

Re: [Mimedefang] Stream_by_domain

2006-01-18 Thread Les Mikesell
On Wed, 2006-01-18 at 11:16, Kevin A. McGrail wrote: > > > I may be able to get them. How well does RHEL 3 handle 50 addresses > > > bound to one NIC? > > > > Linux in general - according to this guy you can get up to 100K IP > addresses on a single NIC with no problem: > > > > http://www.perturb.

Re: [Mimedefang] Stream_by_domain

2006-01-18 Thread Kris Deugau
[EMAIL PROTECTED] wrote: I may be able to get them. How well does RHEL 3 handle 50 addresses bound to one NIC? From experience I can say that RH7.3 handles that just fine (actually, at one point that box had 200 IPs bound to one NIC). WBEL should be pretty much the same. It *does* get a l

RE: [Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread Mack
Your on the ball tonight David lol - replied before my almost instant reply to ignore me being stoopid! Cheers Mack -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David F. Skoll Sent: 18 January 2006 18:11 To: mimedefang@lists.roaringpenguin.com Subject:

RE: [Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread Mack
Does this mean that filter_recipient still get's called if you issue the reject in in filter_helo ? If so, I'm not sure what advantage this gives as the code in filter_recipent can check the helo value and reject/tempfail quite happily ? or can you use return if message_rejected(); # Avoid unnec

Re: [Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread David F. Skoll
Mack wrote: > Does this mean that filter_recipient still get's called if you issue the > reject in in filter_helo ? No. Rejecting in filter_helo means no more callbacks into MIMEDefang. Regards, David. ___ NOTE: If there is a disclaimer or other lega

RE: [Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread Mack
Ignore My previous - I misread the sequence -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mack Sent: 18 January 2006 18:06 To: mimedefang@lists.roaringpenguin.com Subject: RE: [Mimedefang] MIMEDefang 2.55-BETA-3 is available Does this mean that filter_re

Re: [Mimedefang] bad_filename: mim

2006-01-18 Thread Kevin A. McGrail
It's W32/Blackmal.e from symantec and W32/[EMAIL PROTECTED] from NAI. I believe that NAI just released an update for it in just the past 2 minutes. dat-4677.zip was punblished at 8AM their time and then removed and republished at 10AM. Regards, KAM - Original Message - From: <[EMAIL PRO

[Mimedefang] bad_filename: mim

2006-01-18 Thread Matthew.van.Eerde
It looks like a new virus spreads using (among others) .mim files... this could be a good candidate for bad_filename. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

Re: [Mimedefang] Stream_by_domain

2006-01-18 Thread Kevin A. McGrail
> > I may be able to get them. How well does RHEL 3 handle 50 addresses > > bound to one NIC? > > Linux in general - according to this guy you can get up to 100K IP addresses on a single NIC with no problem: > > http://www.perturb.org/display/entry/708/favicon.ico I'm at 71 on one single box and

RE: [Mimedefang] Stream_by_domain

2006-01-18 Thread Damrose, Mark
> -Original Message- > From: [EMAIL PROTECTED] > > > That sounds like a good idea, if you have the IP addresses > to spare... > > if not you'll need to do some SWIPing. > > I may be able to get them. How well does RHEL 3 handle 50 > addresses bound to one NIC? I haven't run that man

RE: [Mimedefang] Stream_by_domain

2006-01-18 Thread Matthew.van.Eerde
WBrowne wrote: > Matthew van Eerde wrote on 01/18/2006 > 11:02:37 AM: > > >> That sounds like a good idea, if you have the IP addresses to >> spare... if not you'll need to do some SWIPing. > > I may be able to get them. How well does RHEL 3 handle 50 addresses > bound to one NIC? Linux in gen

RE: [Mimedefang] Stream_by_domain

2006-01-18 Thread WBrown
[EMAIL PROTECTED] wrote on 01/18/2006 11:02:37 AM: > That sounds like a good idea, if you have the IP addresses to > spare... if not you'll need to do some SWIPing. I may be able to get them. How well does RHEL 3 handle 50 addresses bound to one NIC?

RE: [Mimedefang] Stream_by_domain

2006-01-18 Thread Matthew.van.Eerde
WBrown wrote: > DFS wrote on 01/17/2006 03:35:08 PM: > What would be the downside to binding 50 or more IP addresses, one for > each domain handled to the NIC on an RHEL 3 box and giving each domain > their own IP address on the box? That sounds like a good idea, if you have the IP addresses to sp

Re: [Mimedefang] Stream_by_domain

2006-01-18 Thread WBrown
DFS wrote on 01/18/2006 10:41:06 AM: > It depends on the MTA. I believe Sendmail is smart enough to notice that > both MX hosts have the same IP address, and send the mail over one SMTP > session. I sort of expected that to be the case. That's why I asked the follow up question. > Well, the

Re: [Mimedefang] Stream_by_domain

2006-01-18 Thread David F. Skoll
[EMAIL PROTECTED] wrote: > Speaking of stram_by_domain, Is there any way to get mail from the same > source, but to different domains to be sent on different connections? It depends on the MTA. I believe Sendmail is smart enough to notice that both MX hosts have the same IP address, and send the

[Mimedefang] Stream_by_domain

2006-01-18 Thread WBrown
DFS wrote on 01/17/2006 03:35:08 PM: > It's hairy, but manageable. Doing per-recipient content-filtering is > a lot hairier and less managable; we have to use hacks like > stream_by_domain or stream_by_recipient. Unfortunately, that's just how > SMTP works. Speaking of stram_by_domain, Is there

[Mimedefang] MIMEDefang 2.55-BETA-3 is available

2006-01-18 Thread David F. Skoll
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, MIMEDefang 2.55-BETA-3 is available at http://www.mimedefang.org/node.php?id=1 The biggest change since BETA-2 is support for the filter_helo function, courtesy of Philip Prindeville. Please note that in my tests with Sendmail 8.13.4, Sendmail

Re: [Mimedefang] Slaves dying unexpectedly with signal 14

2006-01-18 Thread Jan Pieter Cornet
On Wed, Jan 18, 2006 at 10:34:24PM +1300, Roland Pope wrote: > From: "Jan Pieter Cornet" <[EMAIL PROTECTED]> > > I assume signal 14 is a SIGALRM. If "kill -l" on your system doesn't show > > "14) SIGALRM" in the output somewhere, then the below is invalid. > > Yes 14 is SIGALRM > > > If it's a pe

Re: [Mimedefang] Slaves dying unexpectedly with signal 14

2006-01-18 Thread Roland Pope
- Original Message - From: "Jan Pieter Cornet" <[EMAIL PROTECTED]> > I assume signal 14 is a SIGALRM. If "kill -l" on your system doesn't show > "14) SIGALRM" in the output somewhere, then the below is invalid. Yes 14 is SIGALRM > If it's a perl module that uses alarm() and then fails t

Re: [Mimedefang] Slaves dying unexpectedly with signal 14

2006-01-18 Thread Jan Pieter Cornet
On Wed, Jan 18, 2006 at 08:37:31PM +1300, Roland Pope wrote: > I posted an email some time back asking about MD slaves that were > unexpectedly terminating with a signal 14. David Skoll mentioned at the time > that it was possibly a perl module generating this signal 14 which was > somehow not bein

Re: [Mimedefang] Adding filter_helo support

2006-01-18 Thread Jan Pieter Cornet
On Tue, Jan 17, 2006 at 03:33:38PM -0800, Gary Funck wrote: > OK, and what about the question raised as to how incoming mailers > might react if, for example, tempfailed at HELO time, and related > questions? I asked that merely out of curiousity, since it's not common to reject after HELO, so it'