[SA-exim] SA timeout

[David Burton]

Aaron Stromas <passogiau at gmail.com> wrote on Wed Dec 7 16:34:10 PST 2005:

> On 12/7/05, Bob Amen <amen at oreilly.com> wrote:
> >
> > Aaron Stromas wrote:
> >
> > > Hi,
> > >
> > > All of the sudden I'm getting spam delivered to mailboxes. When I
> > > examine the headers I see SA timeout:
> > >
> > > *X-SA-Exim-Connect-IP:* 59.82.130.46 <http://59.82.130.46>
> > > *X-SA-Exim-Mail-From:* Mason.Alford at wildmail.com
> > > <
> > https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com
> > >
> > > *X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
> > > 240 secs
> > > Why would this happen? (Restarting exim does not seem to have helped)
> >
> >
> >     Check that your spamd is running. You might also want to run
> > "spamassassin -D --lint" just to make sure everything is OK with your SA
> > config files.
>
>
> Thanks. It's spampd (proxy daemon). It was running.
>
> -a


Did you ever solve this, Aaron?

I also get frequent SA timeouts.  The result is that the
spams show up in my mailbox with headers like these:

....
X-SA-Exim-Mail-From: gixriqdvhqk at com.mx
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on BurtonSys.com
X-Spam-Report:
	*  2.0 MOSTLY_SPAM_TOADDR1 Sent to a burtonsys.com address that gets
	*      mostly spam
	*  0.9 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
	*  0.8 INFO_TLD URI: Contains an URL in the INFO top-level domain
	*  0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
	*  0.3 HTML_FONT_BIG BODY: HTML tag for a big font size
	*  0.0 HTML_MESSAGE BODY: HTML included in message
	*  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
	*      [Blocked - see <http://www.spamcop.net/bl.shtml?189.155.135.240>]
	*  1.1 URIBL_SBL Contains an URL listed in the SBL blocklist
	*      [URIs: royal-casinos.info]
	*  3.6 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
	*      [URIs: royal-casinos.info]
	*  1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
	*      [URIs: royal-casinos.info]
	*  3.3 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
	*      [URIs: royal-casinos.info]
	*  3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
	*      [URIs: royal-casinos.info]
	* -2.7 AWL AWL: From: address is in the auto white-list
X-Spam-Status: Yes, score=15.5 required=2.0 tests=AWL,DATE_IN_PAST_12_24,
	HTML_FONT_BIG,HTML_MESSAGE,INFO_TLD,MIME_HTML_ONLY,
	MOSTLY_SPAM_TOADDR1,RCVD_IN_BL_SPAMCOP_NET,URIBL_AB_SURBL,
	URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
	autolearn=disabled version=3.1.5
Subject: [SPAM 15.5] Hi
X-Spam-Prev-Subject: Hi
X-SA-Exim-Version: 4.2.1 (built Mon, 19 Jun 2006 12:05:49 -0400)
X-SA-Exim-Scanned: Yes (on burtonsys.com)
X-SA-Exim-Scanned: No (on burtonsys.com); SA Timed out after 290 secs


The only problem that "spamassassin --lint" reports is:

[31915] warn: config: failed to parse line, skipping: _

(Unfortunately, it doesn't give an indication of WHICH line
it thinks contains a bare underscore.  In fact, there is no
such line in local.cf.  In fact, the only single-character
lines in local.cf consist of just a single '#' (comment)
character.  So I've been ignoring this issue, and I doubt
that it is connected with the SA timeouts.)

Any ideas, anyone?

-Dave
dave123 at burtonsys dot com