Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Spamassassin problem

[bigd]

We have experienced an intermittent problem with spamassassin on a few of our servers with just a few of our customers. We were told from other sources that this is a bug in SA, which I have a hard time believing because I see no one else complaining about this issue. We are running cpanel/whm with exim on Linux RHE.

Here is the exigrep from /var/log/exim_mainlog entry showing the problem:

2005-03-08 12:56:15 1234 <= dw@domain1.com H=(domain1.com) [00.00.00.00] P=smtp S=924 id=1234@dw
2005-03-08 13:01:14 1234 Spool file is locked (another process is handling this message)
2005-03-08 13:01:15 1234 <coach@domain2.com>: virtual_sa_userdelivery transport output: An error was detected while processing a file of BSMTP input.
2005-03-08 13:01:15 1234 ** coach@domain2.com R=virtual_sa_user T=virtual_sa_userdelivery: Child process of virtual_sa_userdelivery transport returned 2 from command: /usr/sbin/sendmail
2005-03-08 13:01:15 1234 Completed

Can anyone identify this problem?

Thanks in advance,

[andy18]

tried run /scripts/upcp --force which will reinstall your cpanel to see if it helps..

[bigd]

/scripts/upcp --force does not fix the problem

Here is the message sent to email sender when this error occurs:

------An error was detected while processing a file of BSMTP input.
The error message was: 421 SMTP incoming data timeout - message abandonedThe SMTP transaction started in line 0.
The error was detected in line 3.
0 previous messages were successfully processed.
The rest of the batch was abandoned.
421 SMTP incoming data timeout - message abandoned
Transaction started in line 0
Error detected in line 3

Some forums discuss this problem but no one has a solution.

This problem only happens on servers with Linux, cpanel/whm and spamassassin installed.

The only affected servers are DUEL CPU boxes - ALL OF THEM!

Message fails with error after 5 minutes in queue then freezes for a later spool run.

spamassassin is the problem because it's turned off on one server and there are no errors in 24 hours.

This has to be a spamassassin bug that has not been addressed in SA 3.0.2

My only solution is to bulk up the RBL's and stop spamassasin on all of these servers.

Does anyone have any insight on the solution to this problem. Posting links to threads that just discuss this issue without a real resolution is pointless - been there done that.

[assistanz247]

Hey David,

This was due to a new bug in cpanel Spamassissin software. Try the fix in the following link :

http://forums.cpanel.net/showthread.php?t=12359&page=6

[sprintserve]

That was an old bug. If you look at the dates on that Cpanel thread and SpamAssassin 3.0.2 is supposed to fix all that.

Did you try disable bayes ?

[bigd]

I looked at the "patch" and it was for SA 3.0.0, I am not going to apply a patch for a different version as this could create larger problems and as chirpy says in one post that updates will wipe this patch out. I think the patch idea is not for me.

I did find (thanks to chirpy) that my clamav was old. When I upgraded this, the spamd failure messages stopped, but there is still the original problem with 421 errors.

I have disabled bayes in /etc/mail/spamassassin/local.cf by adding this entry:
use_bayes 0

I do believe that spamassassin coders are aware of this problem, but they are not addressing this bug in their updates for some reason. Maybe they don't know how to fix it. As you can see I don't have much faith in their work.

Going on a month now and customers are still complaining...