Re: Milter gone wiggy? Maybe spamd?

[Dan Nelson]

In the last episode (Jan 25), Dan O'Brien said:
> Environment is Fedora Core 1 (fully up-to-date w/ patches); SendMail 
> 8.12.10-1.1.1 (Fedora Core RPM); SpamAssassin 2.63; spamass-milter 
> 0.2.0+cvs.
> 
> Yesterday, at approximately 5:20pm, my server stopped filtering spam... it 
> just decided to happily pass it along to its intended recipient.  All the 
> processes appeared to be running.  /var/log/maillog shows calls to spamd, 
> and it responding to connections, just doesn't seem to be doing any 
> processing...  Nothing on /var/log/messages.
> 
> On closer inspection and some further thought, it's probably a problem 
> with SPAMD, since the milter seems to be getting some response from 
> SpamAssassin... But if anyone can offer any insight, I'd appreciate it.
> 
> /* - - - - LAST "GOOD" MESSAGE PROCESSED - - - - */
> 
> Jan 24 17:19:07 sweep sendmail[25146]: i0OMJ6Tf025146:  
> from=<address@hidden>, size=4291, class=-100, nrcpts=1,  
> msgid=<address@hidden>,  proto=ESMTP, daemon=MTA, relay=hormel.redhat.com 
> [66.187.233.30] 
> Jan 24 17:19:07 sweep spamd[17700]: connection from localhost.localdomain  
> [127.0.0.1] at port 44865  
> Jan 24 17:19:07 sweep spamd[25152]: handle_user: unable to find user  
> 'list-admin'!  
> Jan 24 17:19:07 sweep spamd[25152]: processing message  <address@hidden> for  
> list-admin:501.  
> Jan 24 17:19:11 sweep spamd[25152]: clean message (-4.8/5.0) for  
> list-admin:501 in 4.0 seconds, 4527 bytes.  
> Jan 24 17:19:11 sweep sendmail[25146]: i0OMJ6Tf025146: Milter add: header:  
> X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=no  
> \n\tversion=2.63 
> Jan 24 17:19:11 sweep sendmail[25146]: i0OMJ6Tf025146: Milter add: header:  
> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on  
> \n\tsweep.axonsolutions.com 
> Jan 24 17:19:11 sweep sendmail[25154]: i0OMJ6Tf025146:  to=<address@hidden>, 
> delay=00:00:04, xdelay=00:00:00,  mailer=smtp, pri=214291, 
> relay=hub.axonsolutions.com. [192.168.58.11],  dsn=2.0.0, stat=Sent (Message 
> accepted for delivery) 
> 
> /* - - - - SOMETHING GONE TERRIBLY WRONG - - - - */
> 
> Jan 24 17:22:09 sweep sendmail[25155]: i0OMM9Tf025155:  
> from=<address@hidden>, size=3435, class=-100, nrcpts=1,  
> msgid=<address@hidden>, proto=ESMTP, daemon=MTA,  relay=hormel.redhat.com 
> [66.187.233.30] 
> Jan 24 17:22:10 sweep spamd[17700]: connection from localhost.localdomain  
> [127.0.0.1] at port 44868  
> Jan 24 17:22:10 sweep spamd[25161]: handle_user: unable to find user  
> 'list-admin'!  
> Jan 24 17:22:10 sweep spamd[25161]: processing message  <address@hidden> for 
> list-admin:501.  
> Jan 24 17:22:12 sweep sendmail[25163]: i0OMM9Tf025155:  to=<address@hidden>, 
> delay=00:00:03, xdelay=00:00:02,  mailer=smtp, pri=213435, 
> relay=hub.axonsolutions.com. [192.168.58.11],  dsn=2.0.0, stat=Sent (Message 
> accepted for delivery) 

Yes, it looks like spamd is failing somehow, and passing the message
through unchanged.  You can see that spamass-milter isn't adding the
X-Spam-Status or X-Spam-Checker-Version headers, probably because spamd
never added them.  You can probably check this by piping a message
through spamc manually and see what you get.

-- 
        Dan Nelson
        address@hidden