Teodor Milkov wrote: > Kris Van Hees wrote: >> Hi, >> >> I am currently running spamdyke 4.0.10, and I am experiencing very frequent >> cases of hanging spamdyke processes, eating up connections and often causing >> tcpserver to start refusing connections. I am still trying to figure our >> where >> it might be happening and why. So far, it mostly seems to be after there was >> either a DNS timeout or a command timeout. It is turning into a major >> disruption for email service, and I have had to disable spamdyke in order for >> email service to be functional (albeit with a decent increase in spam >> messages). >> >> My config is as follows: >> >> -------> >> log-level=verbose >> log-target=syslog >> >> ip-whitelist-entry=127.0.0.1 >> ip-whitelist-entry=192.168.0/24 >> ip-whitelist-entry=192.168.15/24 >> >> reject-empty-rdns >> reject-missing-sender-mx >> reject-unresolvable-rdns >> >> rdns-whitelist-dir=/var/qmail/spamdyke/rdns-white >> >> relay-level=normal >> local-domains-file=/var/qmail/control/rcpthosts >> >> smtp-auth-level=ondemand >> smtp-auth-command=/bin/checkpassword /bin/true >> >> tls-level=smtp >> tls-certificate-file=/etc/ssl/certs/smtps.pem >> >> dns-timeout-secs=1200 >> idle-timeout-secs=300 >> #connection-timeout-secs=3600 >> -------> >> >> Below is an example of log-level=debug output for a connection that ended up >> hanging for over 9 hours (I killed the process around noon): >> >> -------> >> Mar 10 00:10:53 saffron spamdyke[17086]: >> DEBUG(filter_rdns_missing()@filter.c:848): checking for missing rDNS; rdns: >> (unknown) >> Mar 10 00:10:53 saffron spamdyke[17086]: FILTER_RDNS_MISSING ip: >> 61.108.211.99 >> Mar 10 00:10:53 saffron spamdyke[17086]: >> DEBUG(filter_ip_whitelist()@filter.c:1127): searching IP whitelist file(s); >> ip: 61.108.211.99 >> Mar 10 00:10:59 saffron spamdyke[17086]: >> DEBUG(filter_recipient_relay()@filter.c:2183): checking relaying; >> relay-level: 3 recipient: XXXXXXXXXXXXXXXXX ip: 61.108.211.99 rdns: >> (unknown) local_recipient: true relaying_allowed: false >> Mar 10 00:10:59 saffron spamdyke[17086]: DENIED_RDNS_MISSING from: >> XXXXXXXXXXXXXXXXX to: XXXXXXXXXXXXXXXXX origin_ip: 61.108.211.99 >> origin_rdns: (unknown) auth: (unknown) >> Mar 10 00:16:00 saffron spamdyke[17086]: TIMEOUT from: [email protected] to: >> [email protected] origin_ip: 61.108.211.99 >> origin_rdns: (unknown) auth: (unknown) reason: TIMEOUT >> -------> >> >> Any help, suggestions, or reports of similar experiences would be >> appreciated. > > For sure there's problem with the TLS handling in spamdyke. See > http://www.mail-archive.com/[email protected]/msg02269.html > > I'm not sure what it might be if the connection was not a TLS one. > > ------------------------------------------------------------------------
This is spot on from what I've been able to determine. For more info see above, Teodor's reference to thread: TLS and blocking IO. -- -Eric 'shubes' _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
