Good day,
This may be much more of a spamassassin question than an exim question,
but I know spamassassin is often discussed here. I did enter a bug
report via spamassassin.org's bugzilla.
Using redhat linux 7.3, kernel 2.4.26, exim 4.34,
exiscan-acl-4.34-21.patch, spamassassin 2.63.
After declaring a message to be/not be spam, spamd processes are hanging
around for approx. 5 more minutes before dieing:
[root@eliza sysconfig]# ps ax|grep spamd
5109 ? S 0:04 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
5151 ? R 0:29 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
5159 ? R 0:27 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
5163 ? R 0:21 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
5170 ? R 0:01 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# netstat -ap|grep 5170
tcp 0 0 eliza.gchs.com:783 eliza.gchs.com:34183
CLOSE_WAIT 5170/perl
[root@eliza sysconfig]# lsof|grep 34183
exim 5168 root 5u IPv4 2990940 TCP
eliza.gchs.com:34183->eliza.gchs.com:783 (FIN_WAIT2)
spamd 5170 root 6u IPv4 2990941 TCP
eliza.gchs.com:783->eliza.gchs.com:34183 (CLOSE_WAIT)
[root@eliza sysconfig]# ps ax|grep 5170
5170 ? R 0:16 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# ps ax|grep 5168
5168 ? S 0:00 /usr/exim-4.34/bin/exim -bd -q15m
[root@eliza sysconfig]# grep 5170 /var/log/maillog
Jun 18 02:06:22 eliza spamd[5170]: debug: read_scoreonly_config: cannot
open "//.spamassassin/user_prefs": No such file or directory
Jun 18 02:06:22 eliza spamd[5170]: debug: user has changed
Jun 18 02:06:22 eliza spamd[5170]: debug: bayes: 5170 untie-ing
Jun 18 02:06:23 eliza spamd[5170]: debug: bayes: no dbs present, cannot
scan: /etc/mail/spamassassin/bayes_toks
Jun 18 02:06:23 eliza spamd[5170]: debug: Score set 1 chosen.
Jun 18 02:06:23 eliza spamd[5170]: logmsg: checking message
<32027511.1087534727135.JavaMail.root@appmia41> for nobody:99.
Jun 18 02:06:23 eliza spamd[5170]: checking message
<32027511.1087534727135.JavaMail.root@appmia41> for nobody:99.
Jun 18 02:06:23 eliza spamd[5170]: debug: bayes: Not available for
scanning, only 0 spam(s) in Bayes DB < 200
Jun 18 02:06:23 eliza spamd[5170]: debug: bayes: 5170 untie-ing
Jun 18 02:06:23 eliza spamd[5170]: debug: bayes: 5170 untie-ing db_toks
Jun 18 02:06:23 eliza spamd[5170]: debug: received-header: parsed as [
ip=69.25.52.25 rdns=mia25.ediets.com helo=mia25.ediets.com
by=eliza.gchs.com ident= ]
Jun 18 02:06:23 eliza spamd[5170]: debug: received-header: parsed as [
ip=10.30.11.41 rdns=customer.ediets.com helo= by=mia25.ediets.com ident= ]
Jun 18 02:06:23 eliza spamd[5170]: debug: received-header: 'by'
eliza.gchs.com has public IP 206.205.193.131
Jun 18 02:06:23 eliza spamd[5170]: debug: received-header: relay
69.25.52.25 trusted? no
Jun 18 02:06:23 eliza spamd[5170]: debug: received-header: relay
10.30.11.41 trusted? no
Jun 18 02:06:23 eliza spamd[5170]: debug: is Net::DNS::Resolver
available? yes
Jun 18 02:06:23 eliza spamd[5170]: debug: all '*From' addrs:
dailyByte@???
Jun 18 02:06:23 eliza spamd[5170]: debug: running header regexp tests;
score so far=0
Jun 18 02:06:23 eliza spamd[5170]: debug: running body-text per-line
regexp tests; score so far=0.985
Jun 18 02:06:24 eliza spamd[5170]: debug: Razor2 is not available
Jun 18 02:06:24 eliza spamd[5170]: debug: running raw-body-text per-line
regexp tests; score so far=3.311
Jun 18 02:06:24 eliza spamd[5170]: debug: running uri tests; score so
far=3.311
Jun 18 02:06:24 eliza spamd[5170]: debug: uri tests: Done uriRE
Jun 18 02:06:25 eliza spamd[5170]: debug: running full-text regexp
tests; score so far=4.834
Jun 18 02:06:25 eliza spamd[5170]: debug: Razor2 is not available
Jun 18 02:06:25 eliza spamd[5170]: debug: DCCifd is not available: no
r/w dccifd socket found.
Jun 18 02:06:25 eliza spamd[5170]: debug: DCC is available:
/usr/local/bin/dccproc
Jun 18 02:06:25 eliza spamd[5170]: debug: entering helper-app run mode
Jun 18 02:06:25 eliza spamd[5170]: debug: DCC: got response:
X-DCC-EATSERVER-Metrics: eliza.gchs.com 1166; Body=1 Fuz1=many Fuz2=many
Jun 18 02:06:25 eliza spamd[5170]: debug: leaving helper-app run mode
Jun 18 02:06:25 eliza spamd[5170]: debug: DCC: Listed! BODY: 1 of 999999
FUZ1: 999999 of 999999 FUZ2: 999999 of 999999
Jun 18 02:06:25 eliza spamd[5170]: debug: Pyzor is not available: pyzor
not found
Jun 18 02:06:25 eliza spamd[5170]: debug: all '*To' addrs:
herndon@???
Jun 18 02:06:25 eliza spamd[5170]: debug: forged-HELO: from=ediets.com
helo=ediets.com by=gchs.com
Jun 18 02:06:25 eliza spamd[5170]: debug: forged-HELO: from=ediets.com
helo= by=ediets.com
Jun 18 02:06:25 eliza spamd[5170]: debug: DNS MX records found: 2
Jun 18 02:06:26 eliza spamd[5170]: debug: RBL: success for 9 of 9 queries
Jun 18 02:06:26 eliza spamd[5170]: debug: running meta tests; score so
far=2.34
Jun 18 02:06:26 eliza spamd[5170]: debug: auto-learn? ham=0.1, spam=12,
body-hits=1.355, head-hits=-1.509
Jun 18 02:06:26 eliza spamd[5170]: debug: auto-learn: currently using
scoreset 1. no need to recompute.
Jun 18 02:06:26 eliza spamd[5170]: debug: auto-learn? no: inside
auto-learn thresholds
Jun 18 02:06:26 eliza spamd[5170]: debug: is spam? score=2.34
required=5.2
tests=DATE_MISSING,DCC_CHECK,HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_UNKNOWN,HTML_FONTCOLOR_UNSAFE,HTML_IMAGE_RATIO_14,HTML_MESSAGE,HTML_WEB_BUGS,MIME_HTML_MOSTLY,RATWARE_STORM_URI,RCVD_IN_BSP_TRUSTED
Jun 18 02:06:26 eliza spamd[5170]: logmsg: clean message (2.3/5.2) for
nobody:99 in 4.0 seconds, 24874 bytes.
Jun 18 02:06:26 eliza spamd[5170]: clean message (2.3/5.2) for nobody:99
in 4.0 seconds, 24874 bytes.
[root@eliza sysconfig]# ps ax|grep 5170
5170 ? R 0:41 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# !ps
ps ax|grep 5170
5170 ? R 0:50 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# !ps
ps ax|grep 5170
5170 ? R 0:54 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# !ps
ps ax|grep 5170
5170 ? R 1:00 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# !ps
ps ax|grep 5170
5170 ? R 1:03 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# date
Fri Jun 18 02:11:21 EDT 2004
[root@eliza sysconfig]# !ps
ps ax|grep 5170
5170 ? R 1:04 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# date
Fri Jun 18 02:11:28 EDT 2004
[root@eliza sysconfig]# !ps
ps ax|grep 5170
5170 ? R 1:08 /usr/bin/perl -T -w /usr/bin/spamd -D -d -u
nobody
[root@eliza sysconfig]# date
Fri Jun 18 02:11:49 EDT 2004
[root@eliza sysconfig]# !ps
ps ax|grep 5170
So at Jun 18 02:06:26 spamd declared the message to be not spam, then
not until Jun 18 02:11:49 (or so) did spamd process 5170 die. Any ideas
on how to close the socket immediately after spamd has reported that it
is done scanning the email, and so make the exim process finish? The
bad effect of these lingering socket connections is that exim processes
live much longer than they should, causing many "Connection from x.y.z.a
refused: too many connections" errors. Any help appreciated. Thanks,
--
Pete Johnson ~ pete@??? ~ 301 873 1332
3835 gateway terrace
burtonsville, md 20866
