Spam assassin hits=? problem

youvnor · n00b Joined: 02 Nov 2004 Posts: 36

i run qmail + clamav + spamassassin

in the last few days a lot of spam message is going trought spamassassin.

in normal message i see:
X-Spam ... : No, hits=0.0 required=6.0

in spam message i see

X-Spam ... : no, hits=? required=?

what is happening ?

Xaid · Posted: Tue Dec 21, 2004 1:33 am Post subject:

I run a similar setup, postfix + spamassassin + procmail and it seems to be working fine here.
I suggest checking yr /var/log/messages or equivalent for some errors/warnings.
btw, did u update to a newer version of SA? maybe the config got messed up somehow? you might try enabling extra verbose loggin in qmail/SA and check if everything is working fine...

petterg · Guru Joined: 25 Mar 2004 Posts: 500 Location: Oslo, Norway

Maybe edit the configfile for where required spamlevel is defined (and restart spamd).
Then recieve a none-spam mail and check that the
X-Spam ... : No, hits=0.0 required=6.0
changes to
X-Spam ... : No, hits=0.0 required=[new value]

If it doesn't change spamassassin is not reading the configfile.
(Just a way to locate the problem)

youvnor · n00b Joined: 02 Nov 2004 Posts: 36

it change the level without any problem.

some day ago it was working fine.

now there are some messages that in some way broke trough it...

and put in the header "?" instead of the spam level values...

petterg · Guru Joined: 25 Mar 2004 Posts: 500 Location: Oslo, Norway

what happens when you manualy check a mail with spamc? Does it return any error? Does it give the spam result?
Maybe you need to reemerge qmail-scanner?

petterg · Guru Joined: 25 Mar 2004 Posts: 500 Location: Oslo, Norway

... or you can add the debug option in /etc/conf.d/spamd.
(Can't remember if it was av uppercase or lowercase D for debug)

youvnor · n00b Joined: 02 Nov 2004 Posts: 36

i think it was for the fastspam option.

i have set the qmailscanner to not run spamassassin in fast mode... and it seem to block mail now...

i will have to wait a little to see how it goes.

petterg · Guru Joined: 25 Mar 2004 Posts: 500 Location: Oslo, Norway

if fastspam option was the problem I would guess reemerging qmail-scanner would do the trick. Without fastspam your server might get into trouble if/when it starts to receive a buch of spam mail at the same time.
I had a case in April where one server got 25-30.000 spammail / day for almost two weeks. Had to disable spamassassin to keep the server alive. With the newest spamassassin and fastspam enabled it has an estimated capasity of 20.000 mail/day. If I also disable dns lookup, 40.000 should be within range.
(Reminds me that I should have tested if setting up dns cache on localhost would improve time consumation of spamchecking)

youvnor · n00b Joined: 02 Nov 2004 Posts: 36

i have disable it, and it work.
i did not see more load on the cpu in the last day.
i have about 500 mail-box on the server...

i will look at it, and i will reemerge qmail-scanner on holiday.

youvnor · n00b Joined: 02 Nov 2004 Posts: 36

the server is a 3,2 Ghz xeon with 1GB ram installed...
i think it can do the work quite fine.