Damon McMahon wrote:
Yedidia,
Are you by chance using Bill Stearn's sa-blacklist?
don't configured SA for this (hope it's not default on 2.63)
here is debug info:
Jul 1 14:46:08 demai spamd[4836]: logmsg: connection from localhost.localdomain [127.0.0.1] at port 33131
Jul 1 14:46:08 demai spamd[4836]: connection from localhost.localdomain [127.0.0.1] at port 33131
Jul 1 14:46:08 demai spamd[4860]: logmsg: processing message <[EMAIL PROTECTED]> for jsmith:99.
Jul 1 14:46:08 demai spamd[4860]: processing message <[EMAIL PROTECTED]> for jsmith:99.
Jul 1 14:46:08 demai spamd[4860]: debug: bayes: DB_File module not installed, cannot use Bayes
Jul 1 14:46:08 demai spamd[4860]: debug: received-header: parsed as [ ip=192.168.1.18 rdns=vayeshev.domain.tld helo=vayeshev.domain.tld by=demai.domain.tld ident= ]
Jul 1 14:46:08 demai spamd[4860]: debug: received-header: parsed as [ ip=218.239.240.32 rdns=192.168.1.18 helo= by=vayeshev.domain.tld ident= ]
Jul 1 14:46:08 demai spamd[4860]: debug: received-header: 'from' 192.168.1.18 is near to first 'by'
Jul 1 14:46:08 demai spamd[4860]: debug: received-header: relay 192.168.1.18 trusted? yes
Jul 1 14:46:08 demai spamd[4860]: debug: received-header: 'by' vayeshev.domain.tld has public IP 192.168.1.18
Jul 1 14:46:08 demai spamd[4860]: debug: received-header: relay 218.239.240.32 trusted? no
Jul 1 14:46:08 demai spamd[4860]: debug: is Net::DNS::Resolver available? yes
Jul 1 14:46:08 demai spamd[4860]: debug: all '*From' addrs: [EMAIL PROTECTED] [EMAIL PROTECTED]
Jul 1 14:46:08 demai spamd[4860]: debug: running header regexp tests; score so far=0
Jul 1 14:46:08 demai spamd[4860]: debug: running body-text per-line regexp tests; score so far=0
Jul 1 14:46:08 demai spamd[4860]: debug: Razor2 is not available
Jul 1 14:46:08 demai spamd[4860]: debug: running raw-body-text per-line regexp tests; score so far=22.542
Jul 1 14:46:09 demai spamd[4860]: debug: running uri tests; score so far=23.258
Jul 1 14:46:09 demai spamd[4860]: debug: uri tests: Done uriRE
Jul 1 14:46:09 demai spamd[4860]: debug: running full-text regexp tests; score so far=23.258
Jul 1 14:46:09 demai spamd[4860]: debug: Razor2 is not available
Jul 1 14:46:09 demai spamd[4860]: debug: Pyzor is not available: pyzor not found
Jul 1 14:46:09 demai spamd[4860]: debug: DCCifd is not available: no r/w dccifd socket found.
Jul 1 14:46:09 demai spamd[4860]: debug: DCC is not available: no executable dccproc found.
Jul 1 14:46:09 demai spamd[4860]: debug: all '*To' addrs: [EMAIL PROTECTED]
Jul 1 14:46:09 demai spamd[4860]: debug: DNS MX records found: 0
Jul 1 14:46:09 demai spamd[4860]: debug: DNS A records found: 1
Jul 1 14:46:09 demai spamd[4860]: debug: forged-HELO: from=192.168.1.18 helo= by=domain.tld
Jul 1 14:46:09 demai spamd[4860]: debug: RBL: success for 10 of 10 queries
Jul 1 14:46:09 demai spamd[4860]: debug: running meta tests; score so far=47.201
Jul 1 14:46:09 demai spamd[4860]: debug: auto-learn? ham=0.1, spam=12, body-hits=47.201, head-hits=24.659
Jul 1 14:46:09 demai spamd[4860]: debug: auto-learn: currently using scoreset 1. no need to recompute.
Jul 1 14:46:09 demai spamd[4860]: debug: auto-learn? yes, spam (57.402 > 12)
Jul 1 14:46:09 demai spamd[4860]: debug: Learning Spam
Jul 1 14:46:09 demai spamd[4860]: debug: uri tests: Done uriRE
Jul 1 14:46:09 demai spamd[4860]: debug: bayes: DB_File module not installed, cannot use Bayes
Jul 1 14:46:09 demai spamd[4860]: debug: bayes: 4860 untie-ing
Jul 1 14:46:09 demai spamd[4860]: debug: is spam? score=57.402 required=5 tests=CLICK_BELOW,DNS_FROM_RFCI_DSN,EXCUSE_10,FORGED_AOL_HTML,FORGED_AOL_TAGS,FORGED_MUA_AOL_FROM,HTML_70_80,HTML_IMAGE_ONLY_08,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,LOCAL_CAILIS,LOCAL_VALIUM,LOCAL_VIAGRA_BODY,LOCAL_VICODIN,LOCAL_XANAX,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE,MISSING_OUTLOOK_NAME,ONLINE_PHARMACY,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,RCVD_IN_OPM,RCVD_IN_OPM_HTTP,RCVD_IN_OPM_SOCKS,RCVD_IN_SORBS,RCVD_IN_SORBS_HTTP,RCVD_IN_SORBS_SOCKS,RCVD_IN_SORBS_WEB
Jul 1 14:46:09 demai spamd[4860]: logmsg: identified spam (57.4/5.0) for jsmith:99 in 0.8 seconds, 3720 bytes.
Jul 1 14:46:09 demai spamd[4860]: identified spam (57.4/5.0) for jsmith:99 in 0.8 seconds, 3720 bytes.
Jul 1 14:47:05 demai sendmail[4846]: i5TBwLDg005010: to=<[EMAIL PROTECTED]>, delay=1+23:48:44, xdelay=00:00:58, mailer=local, pri=4473626, dsn=4.0.0, stat=Deferred: local mailer (/usr/bin/procmail) exited with EX_TEMPFAIL
looks like a good SPAM... any clue ???
tnx,
--Yedidia Klein
Same thing happened on my mail server yesterday - it almost ground to a halt, stalled procmail processes all over the place, sendmail errors identical to yours - very ugly.
Eventually traced it down to the fact that the sa-blacklist.current had inadvertently quintupled (5x) in size overnight, from 1.5 to almost 7 MB in size. I use daily auto-updates of this list so hadn't noticed until the side-effects appeared.
See the thread titled 'blacklist brings system to halt' in this list for further details.
Regards, Damon
I'm in the process of setting a new mail server on a Dual Xeon HT machine w/
RH Enterprise AS3, sendmail 8.12.11 and SPAMASSASSIN 2.63 that run via procmail using spamd/spamc way.
I found this on my logs (/var/log/maillog)
Jun 29 16:54:49 mail-server sendmail[5512]: i5TC88xl005078: timeout waiting for input from local during Draining Input
Jun 29 17:02:49 mail-server sendmail[5512]: i5TC88xl005078: to=, delay=01:54:39, xdelay=00:10:00, mailer=local, pr
i=213649, dsn=4.0.0, stat=Deferred: local mailer (/usr/bin/procmail) exited with EX_TEMPFAIL
and there was also a stucked spamd process from this user..
sounds like spamc was stucked then sendmail get in time out for waiting to procmail...
any way to know why spamc/spamd was stucked / what could cause this problem ?
thanks,
--Yedidia
_________________________________________________________________
Get a Virgin Credit Card and win an adventure: http://ad.doubleclick.net/clk;8661322;9498324;s?http://www.promo.com.au/virgincreditcard/firstbirthday/track.cfm?source=N92
