[SA-exim] SA timeout

[Marc MERLIN]

On Fri, Jan 26, 2007 at 01:30:19PM -0500, David Burton wrote:
> Aaron Stromas <passogiau at gmail.com> wrote on Wed Dec 7 16:34:10 PST 2005:
> 
> > On 12/7/05, Bob Amen <amen at oreilly.com> wrote:
> > >
> > > Aaron Stromas wrote:
> > >
> > > > Hi,
> > > >
> > > > All of the sudden I'm getting spam delivered to mailboxes. When I
> > > > examine the headers I see SA timeout:
> > > >
> > > > *X-SA-Exim-Connect-IP:* 59.82.130.46 <http://59.82.130.46>
> > > > *X-SA-Exim-Mail-From:* Mason.Alford at wildmail.com
> > > > <
> > > https://www.izoard.com/mail/src/compose.php?send_to=Mason.Alford%40wildmail.com
> > > >
> > > > *X-SA-Exim-Scanned:* No (on localhost.localdomain); SA Timed out after
> > > > 240 secs
> > > > Why would this happen? (Restarting exim does not seem to have helped)
> > >
> > >
> > >     Check that your spamd is running. You might also want to run
> > > "spamassassin -D --lint" just to make sure everything is OK with your SA
> > > config files.
> >
> >
> > Thanks. It's spampd (proxy daemon). It was running.
> >
> > -a
> 
> 
> Did you ever solve this, Aaron?
 
I used to have time logging information in spamassassin so you could find
out after the fact why it SA would ever take more than 4mn. Unfortunately,
some of that code was removed from more recent SAs, but you should still be
able to find why SA is taking so long by feeding the message from the
command line while being in debug mode.

Either way, this is most likely a problem just with SA, not with Exim or
SA-Exim.
 
> I also get frequent SA timeouts.  The result is that the
> spams show up in my mailbox with headers like these:
> 
> ....
> X-SA-Exim-Mail-From: gixriqdvhqk at com.mx
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on BurtonSys.com
> X-Spam-Report:
> 	*  2.0 MOSTLY_SPAM_TOADDR1 Sent to a burtonsys.com address that gets
> 	*      mostly spam
> 	*  0.9 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
> 	*  0.8 INFO_TLD URI: Contains an URL in the INFO top-level domain
> 	*  0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
> 	*  0.3 HTML_FONT_BIG BODY: HTML tag for a big font size
> 	*  0.0 HTML_MESSAGE BODY: HTML included in message
> 	*  1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
> 	*      [Blocked - see <http://www.spamcop.net/bl.shtml?189.155.135.240>]
> 	*  1.1 URIBL_SBL Contains an URL listed in the SBL blocklist
> 	*      [URIs: royal-casinos.info]
> 	*  3.6 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
> 	*      [URIs: royal-casinos.info]
> 	*  1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
> 	*      [URIs: royal-casinos.info]
> 	*  3.3 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
> 	*      [URIs: royal-casinos.info]
> 	*  3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
> 	*      [URIs: royal-casinos.info]
> 	* -2.7 AWL AWL: From: address is in the auto white-list
> X-Spam-Status: Yes, score=15.5 required=2.0 tests=AWL,DATE_IN_PAST_12_24,
> 	HTML_FONT_BIG,HTML_MESSAGE,INFO_TLD,MIME_HTML_ONLY,
> 	MOSTLY_SPAM_TOADDR1,RCVD_IN_BL_SPAMCOP_NET,URIBL_AB_SURBL,
> 	URIBL_JP_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
> 	autolearn=disabled version=3.1.5
> Subject: [SPAM 15.5] Hi
> X-Spam-Prev-Subject: Hi
> X-SA-Exim-Version: 4.2.1 (built Mon, 19 Jun 2006 12:05:49 -0400)
> X-SA-Exim-Scanned: Yes (on burtonsys.com)
> X-SA-Exim-Scanned: No (on burtonsys.com); SA Timed out after 290 secs
> 
> 
> The only problem that "spamassassin --lint" reports is:
> 
> [31915] warn: config: failed to parse line, skipping: _
> 
> (Unfortunately, it doesn't give an indication of WHICH line
> it thinks contains a bare underscore.  In fact, there is no
> such line in local.cf.  In fact, the only single-character
> lines in local.cf consist of just a single '#' (comment)
> character.  So I've been ignoring this issue, and I doubt
> that it is connected with the SA timeouts.)
> 
> Any ideas, anyone?
> 
> -Dave
> dave123 at burtonsys dot com
> 
> _______________________________________________
> SA-Exim mailing list
> SA-Exim at lists.merlins.org
> http://lists.merlins.org/lists/listinfo/sa-exim
> 

-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/