Re: [exim] exim/spamd problem

Top Page
Delete this message
Reply to this message
Author: Johann Spies
Date:  
To: exim-users
Subject: Re: [exim] exim/spamd problem
On Thu, Feb 08, 2007 at 01:19:21PM +0200, Paulo Andre wrote:
> I keep getting the following in my exim_paniclog :
> 2007-02-08 13:16:16 1HF7BY-00067v-Jc spam acl condition: all spamd
> servers failed
> 2007-02-08 13:16:17 1HF7G5-0006Wl-Sw spam acl condition: warning - spamd
> connection to 127.0.0.1, port 783 failed: Connection timed out
> 2007-02-08 13:16:17 1HF7G5-0006Wl-Sw spam acl condition: all spamd
> servers failed
> 2007-02-08 13:16:18 1HF7Cx-0006Gm-Qv spam acl condition: warning - spamd
> connection to 127.0.0.1, port 783 failed: Connection timed out
> 2007-02-08 13:16:18 1HF7Cx-0006Gm-Qv spam acl condition: all spamd
> servers failed
>
> I can telnet to 127.0.0.1:783, that seems to be working. Spamd is also
> working.
> Running exim 4.50
>
> Anyone know what I should be looking for?


We found the same and the cause was that there was some problem with
razor-lookups. You will probably see something like this when you do
netstat:

$sudo netstat -plant | grep spam
tcp        0      0 127.0.0.1:783           0.0.0.0:*               LISTEN      19431/spamd.pid
tcp        0      0 127.0.0.1:783           127.0.0.1:36611         CLOSE_WAIT  31537/spamd child
tcp        0      0 127.0.0.1:783           127.0.0.1:36616         CLOSE_WAIT  21337/spamd child
tcp        0      0 127.0.0.1:783           127.0.0.1:36620         CLOSE_WAIT  21804/spamd child
tcp        0      0 146.232.64.13:36629     70.42.39.14:2703        ESTABLISHED 21804/spamd child
tcp        0      1 146.232.64.13:36617     70.42.39.14:2703        SYN_SENT    31537/spamd child
tcp        0      1 146.232.64.13:36618     70.42.39.14:2703        SYN_SENT    21337/spamd child


The SYN_SENT-lines indicates a problem. That keeps spamassassin busy
and then exim get the time-out.

Sometimes it helps when you run a "razor-admin -discover -d" as the user
which runs spamassassin - in our case "spamd" is the user.

Regards
Johann
-- 
Johann Spies          Telefoon: 021-808 4036
Informasietegnologie, Universiteit van Stellenbosch


     "The heavens declare the glory of God; and the  
      firmament showeth his handiwork."          Psalms 19:1