Hi, all,
after putting up and migrating to SME7, i notice pretty slow actions in qsmtpd. I activated RBL and use uncustomized SME7 spamfilter. My log shows:
2006-02-01 07:07:18.225030500 5740 Connection from Unknown [222.121.85.117]
2006-02-01 07:07:18.227833500 5740 running plugin (connect): check_earlytalker
2006-02-01 07:07:18.230352500 5740 trying to get config for memory_threshold
2006-02-01 07:07:19.233840500 5740 check_earlytalker plugin: remote host said nothing spontaneous, proceeding
2006-02-01 07:07:19.234345500 5740 Plugin check_earlytalker, hook connect returned DECLINED,
2006-02-01 07:07:19.234871500 5740 running plugin (connect): check_relay
2006-02-01 07:07:19.235609500 5740 trying to get config for relayclients
2006-02-01 07:07:19.236907500 5740 trying to get config for morerelayclients
2006-02-01 07:07:19.237953500 5740 Plugin check_relay, hook connect returned DECLINED,
2006-02-01 07:07:19.238444500 5740 running plugin (connect): check_norelay
2006-02-01 07:07:19.239204500 5740 trying to get config for norelayclients
2006-02-01 07:07:19.240425500 5740 Plugin check_norelay, hook connect returned DECLINED,
2006-02-01 07:07:19.241024500 5740 running plugin (connect): dnsbl
2006-02-01 07:07:19.242100500 5740 dnsbl plugin: RBLSMTPD not set for 222.121.85.117
2006-02-01 07:07:19.242646500 5740 trying to get config for dnsbl_allow
2006-02-01 07:07:19.243273500 5740 trying to get config for dnsbl_zones
2006-02-01 07:07:19.246740500 5740 dnsbl plugin: Checking 117.85.121.222.dnsbl.sorbs.net for TXT record in the background
2006-02-01 07:07:19.257481500 5740 dnsbl plugin: Checking 117.85.121.222.bl.spamcop.net for TXT record in the background
2006-02-01 07:07:19.262319500 5740 dnsbl plugin: Checking 117.85.121.222.relays.ordb.org for TXT record in the background
2006-02-01 07:07:19.266870500 5740 dnsbl plugin: Checking 117.85.121.222.dnsbl.njabl.org for TXT record in the background
2006-02-01 07:07:19.271744500 5740 dnsbl plugin: Checking 117.85.121.222.whois.rfc-ignorant.org for TXT record in the background
2006-02-01 07:07:19.276399500 5740 dnsbl plugin: Checking 117.85.121.222.sbl-xbl.spamhaus.org for TXT record in the background
2006-02-01 07:07:19.281970500 5740 Plugin dnsbl, hook connect returned DECLINED,
2006-02-01 07:07:19.282524500 5740 trying to get config for smtpgreeting
2006-02-01 07:07:19.283113500 5740 trying to get config for me
2006-02-01 07:07:19.284761500 5740 220 che24.de ESMTP qpsmtpd 0.31-dev ready; send us your mail, but not your spam.
2006-02-01 07:07:19.285823500 5740 trying to get config for timeoutsmtpd
2006-02-01 07:07:19.286448500 5740 trying to get config for timeout
2006-02-01 07:07:19.833368500 5740 dispatching HELO 87.123.85.84
2006-02-01 07:07:19.833374500 5740 running plugin (helo): check_spamhelo
2006-02-01 07:07:19.833376500 5740 trying to get config for badhelo
2006-02-01 07:07:19.833378500 5740 Plugin check_spamhelo, hook helo returned DECLINED,
2006-02-01 07:07:19.833380500 5740 trying to get config for me
2006-02-01 07:07:19.833382500 5740 250 che24.de Hi Unknown [222.121.85.117]; I am so happy to meet you.
2006-02-01 07:07:20.394530500 5740 dispatching MAIL FROM: <DBZOYVJLL@msn.com>
2006-02-01 07:07:20.394538500 5740 trying to get config for memory_threshold
2006-02-01 07:07:20.394540500 5740 full from_parameter: FROM: <DBZOYVJLL@msn.com>
2006-02-01 07:07:20.394542500 5740 from email address : [<DBZOYVJLL@msn.com>]
2006-02-01 07:07:20.395041500 5740 running plugin (mail): require_resolvable_fromhost
2006-02-01 07:07:20.396187500 5740 trying to get config for invalid_resolvable_fromhost
2006-02-01 07:07:20.397133500 5740 trying to get config for require_resolvable_fromhost
2006-02-01 07:07:21.849120500 5740 Plugin require_resolvable_fromhost, hook mail returned DECLINED,
2006-02-01 07:07:21.849127500 5740 running plugin (mail): rhsbl
2006-02-01 07:07:21.849129500 5740 trying to get config for rhsbl_zones
2006-02-01 07:07:21.849131500 5740 rhsbl plugin: Checking msn.com.dsn.rfc-ignorant.org for A record in the background
2006-02-01 07:07:21.855105500 5740 Plugin rhsbl, hook mail returned DECLINED,
2006-02-01 07:07:21.855111500 5740 running plugin (mail): check_badmailfrom
2006-02-01 07:07:21.855113500 5740 trying to get config for badmailfrom
2006-02-01 07:07:21.855115500 5740 Plugin check_badmailfrom, hook mail returned DECLINED,
2006-02-01 07:07:21.856450500 5740 getting mail from <DBZOYVJLL@msn.com>
2006-02-01 07:07:21.856456500 5740 250 <DBZOYVJLL@msn.com>, sender OK - how exciting to get mail from you!
2006-02-01 07:07:22.397856500 5740 dispatching RCPT TO: <alex@che24.de>
2006-02-01 07:07:22.397863500 5740 to email address : [<alex@che24.de>]
2006-02-01 07:07:22.397865500 5740 running plugin (rcpt): rhsbl
2006-02-01 07:07:22.397867500 5740 rhsbl plugin: waiting for rhsbl dns
2006-02-01 07:07:30.396729500 5740 rhsbl plugin: DONE waiting for rhsbl dns, got 0 answers ...
2006-02-01 07:07:30.406743500 5740 Plugin rhsbl, hook rcpt returned DECLINED,
2006-02-01 07:07:30.406750500 5740 running plugin (rcpt): dnsbl
2006-02-01 07:07:30.406752500 5740 trying to get config for dnsbl_zones
2006-02-01 07:07:30.406754500 5740 dnsbl plugin: waiting for dnsbl dns
2006-02-01 07:07:30.406756500 5740 dnsbl plugin: DONE waiting for dnsbl dns, got 5 answers ...
2006-02-01 07:07:30.406758500 5740 trying to get config for dnsbl_zones
2006-02-01 07:07:30.407859500 5740 dnsbl plugin: waiting for dnsbl dns
2006-02-01 07:07:38.410505500 5740 dnsbl plugin: DONE waiting for dnsbl dns, got 0 answers ...
2006-02-01 07:07:38.410512500 5740 Plugin dnsbl, hook rcpt returned DECLINED,
2006-02-01 07:07:38.410514500 5740 running plugin (rcpt): check_badmailfrom
2006-02-01 07:07:38.410516500 5740 Plugin check_badmailfrom, hook rcpt returned DECLINED,
2006-02-01 07:07:38.410520500 5740 running plugin (rcpt): check_badrcptto_patterns
2006-02-01 07:07:38.410522500 5740 trying to get config for badrcptto_patterns
2006-02-01 07:07:38.415494500 5740 Plugin check_badrcptto_patterns, hook rcpt returned DECLINED,
2006-02-01 07:07:38.415501500 5740 running plugin (rcpt): check_badrcptto
2006-02-01 07:07:38.415503500 5740 trying to get config for badrcptto
2006-02-01 07:07:38.415954500 5740 Plugin check_badrcptto, hook rcpt returned DECLINED,
2006-02-01 07:07:38.417917500 5740 running plugin (rcpt): check_goodrcptto
2006-02-01 07:07:38.418940500 5740 check_goodrcptto plugin: stripping '-' extensions
2006-02-01 07:07:38.419511500 5740 trying to get config for goodrcptto
2006-02-01 07:07:38.422165500 5740 Plugin check_goodrcptto, hook rcpt returned DECLINED,
2006-02-01 07:07:38.422739500 5740 running plugin (rcpt): rcpt_ok
2006-02-01 07:07:38.423517500 5740 trying to get config for me
2006-02-01 07:07:38.424041500 5740 trying to get config for rcpthosts
2006-02-01 07:07:38.425702500 5740 Plugin rcpt_ok, hook rcpt returned OK,
2006-02-01 07:07:38.426379500 5740 250 <alex@che24.de>, recipient ok
2006-02-01 07:07:38.990509500 5740 dispatching DATA
2006-02-01 07:07:38.990515500 5740 354 go ahead
2006-02-01 07:07:38.990516500 5740 trying to get config for databytes
2006-02-01 07:07:38.990518500 5740 max_size: 0 / size: 0
2006-02-01 07:07:38.991190500 5740 trying to get config for timeout
2006-02-01 07:07:39.935080500 5740 max_size: 0 / size: 489
2006-02-01 07:07:39.935087500 5740 trying to get config for me
2006-02-01 07:07:39.940075500 5740 running plugin (data_post): check_basicheaders
2006-02-01 07:07:39.940082500 5740 Plugin check_basicheaders, hook data_post returned DECLINED,
2006-02-01 07:07:39.940084500 5740 running plugin (data_post): virus::klez_filter
2006-02-01 07:07:39.940086500 5740 Plugin virus::klez_filter, hook data_post returned DECLINED,
2006-02-01 07:07:39.940088500 5740 running plugin (data_post): virus::pattern_filter
2006-02-01 07:07:39.940090500 5740 trying to get config for pattern_filter
2006-02-01 07:07:39.940092500 5740 trying to get config for signatures_patterns
2006-02-01 07:07:39.955206500 5740 Plugin virus::pattern_filter, hook data_post returned DECLINED,
2006-02-01 07:07:39.955214500 5740 running plugin (data_post): tnef2mime
2006-02-01 07:07:39.986060500 5740 Plugin tnef2mime, hook data_post returned DECLINED,
2006-02-01 07:07:39.986067500 5740 running plugin (data_post): spamassassin
2006-02-01 07:07:39.986069500 5740 spamassassin plugin: check_spam
2006-02-01 07:07:39.986071500 5740 spamassassin plugin: check_spam: connected to spamd
2006-02-01 07:07:39.995064500 5740 spamassassin plugin: check_spam: finished sending to spamd
2006-02-01 07:07:43.982973500 5740 spamassassin plugin: check_spam: spamd: SPAMD/1.1 0 EX_OK
2006-02-01 07:07:43.982981500
2006-02-01 07:07:43.982983500 5740 trying to get config for me
2006-02-01 07:07:43.992954500 5740 spamassassin plugin: check_spam: spamd: Content-length: 217
2006-02-01 07:07:43.992961500
2006-02-01 07:07:43.992962500 5740 spamassassin plugin: check_spam: spamd: Spam: True ; 24.6 / 5.0
2006-02-01 07:07:43.992965500
2006-02-01 07:07:43.992966500 5740 spamassassin plugin: check_spam: spamd:
2006-02-01 07:07:43.992968500
2006-02-01 07:07:43.992969500 5740 spamassassin plugin: check_spam: finished reading from spamd
2006-02-01 07:07:44.008965500 5740 spamassassin plugin: check_spam: Yes, hits=24.6, required=5.0, tests=DATE_IN_PAST_96_XX,DCC_CHECK,DIGEST_MULTIPLE,PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_HELO_IP_MISMATCH,RCVD_NUMERIC_HELO,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
2006-02-01 07:07:44.008978500 5740 Plugin spamassassin, hook data_post returned DECLINED,
2006-02-01 07:07:44.008981500 5740 running plugin (data_post): virus::clamav
2006-02-01 07:07:44.008983500 5740 virus::clamav plugin: Changing permissions on file to permit scanner access
2006-02-01 07:07:44.009088500 5740 virus::clamav plugin: Running: /usr/bin/clamdscan --stdout --disable-summary /var/spool/qpsmtpd/1138774049:5740:0 2>&1
2006-02-01 07:07:44.081009500 5740 virus::clamav plugin: clamscan results: /var/spool/qpsmtpd/1138774049:5740:0: OK
2006-02-01 07:07:44.081017500 5740 Plugin virus::clamav, hook data_post returned DECLINED,
2006-02-01 07:07:44.081020500 5740 running plugin (queue): queue::qmail_2dqueue
2006-02-01 07:07:44.090167500 5745 queue::qmail_2dqueue plugin: (for 5740 ) Queuing qp 5745 to /var/qmail/bin/qmail-queue
2006-02-01 07:07:44.108398500 5740 Plugin queue::qmail_2dqueue, hook queue returned OK, Queued! 1138774054 qp 5745 <68TM87FE.0D24.DBZOYVJLL@msn.com>
2006-02-01 07:07:44.109098500 5740 250 Queued! 1138774054 qp 5745 <68TM87FE.0D24.DBZOYVJLL@msn.com>
2006-02-01 07:07:44.111056500 5740 trying to get config for memory_threshold
2006-02-01 07:07:44.737870500 5740 dispatching QUIT
2006-02-01 07:07:44.737876500 5740 trying to get config for me
2006-02-01 07:07:44.737878500 5740 221 che24.de closing connection. Have a wonderful day.
2006-02-01 07:07:44.737880500 5740 click, disconnecting
2006-02-01 07:07:44.737882500 5740 running plugin (disconnect): rhsbl
2006-02-01 07:07:44.737884500 5740 Plugin rhsbl, hook disconnect returned DECLINED,
2006-02-01 07:07:44.737886500 5740 running plugin (disconnect): dnsbl
2006-02-01 07:07:44.737887500 5740 Plugin dnsbl, hook disconnect returned DECLINED,
2006-02-01 07:07:44.738840500 5740 trying to get config for memory_threshold
2006-02-01 07:07:45.225602500 2179 cleaning up after 5740
If i get that right, this means 37 seconds of checking and processing an incoming mail, that obviously is spam by all means! Spamlevel of this mail was 24, so you can guess it is 100 % spammy.
This is a home server with little mail traffic. But i this server would receive appx. 100 mails an hour, it would get overloaded.
My old SME6 did check RBL and refuse connection, if the lists were negative. I am no expert, but it does not make sense to me, to do 20 different spam-checks on a mail including virus-checks, that is recognized as spam with 99 % by a spam-assassin level >20.
How could this be optimized by the end-user?
3 Replies
2304 Views