mirror of
https://github.com/darold/sendmailanalyzer.git
synced 2026-05-15 22:02:32 -06:00
[GH-ISSUE #25] Not all spam identified using spamd #16
Labels
No labels
enhancement
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/sendmailanalyzer#16
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @sirydog81 on GitHub (Nov 11, 2014).
Original GitHub issue: https://github.com/darold/sendmailanalyzer/issues/25
It seems not all mails are recognized as spam even though in maillog spamd logs them ok.
I have 9 messages as spam but sendmailanalyzer shows only 4.
I can provide the maillog.
Thank you for you very usefull tool!
@darold commented on GitHub (Nov 12, 2014):
Thanks for the report. Please send your log to my private email gilles AT darold DOT net
@sirydog81 commented on GitHub (Nov 13, 2014):
Thx. Mail sent!
@darold commented on GitHub (Nov 18, 2014):
Thank you for your help. I was able to fix the issue on spamd and an other one related to the number of incoming message. Please upgrade to latest development code an let me know.
@sirydog81 commented on GitHub (Nov 24, 2014):
Installed it yesterday and wanted to let it run for a day, but the daemon died unexpectedly.
in /var/lib/sendmailanalyzer/LAST_PARSED
has exactly this:
"Nov 23 11:19:32 ns clamd[1814]: SelfCheck: Database status OK. 14932"
including that number
root@ns:/var/lib/sendmailanalyzer# ls -l LAST_PARSED
-rw-r--r-- 1 root root 68 2014-11-23 11:29 LAST_PARSED
root@ns:/var/lib/sendmailanalyzer# stat LAST_PARSED
File: `LAST_PARSED'
Size: 68 Blocks: 8 IO Block: 4096 regular file
Device: 900h/2304d Inode: 5777608 Links: 1
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
Access: 2014-11-24 09:15:30.000000000 +0200
Modify: 2014-11-23 11:29:32.000000000 +0200
Change: 2014-11-23 11:29:32.000000000 +0200
and in /var/log/maillog at that time i had only this logs:
Nov 23 11:09:32 ns clamd[1814]: SelfCheck: Database status OK.
Nov 23 11:19:32 ns clamd[1814]: SelfCheck: Database status OK.
Nov 23 11:29:32 ns clamd[1814]: SelfCheck: Database status OK.
Nov 23 11:39:32 ns clamd[1814]: SelfCheck: Database status OK.
root@ns:/var/run# ps -A | grep tail
7488 ? 00:00:00 tail
root@ns:/var/run# ps -A | grep sendmailana
7487 ? 00:00:00 sendmailanalyze
So it's still running but in /var/run there is no sendmailanalyzer.pid
Very strange.
root@ns:/var/run# /etc/rc.d/rc.sendmailanalyzer stop
Stopping SendmailAnalyzer Daemon...
cat: /var/run/sendmailanalyzer.pid: No such file or directory
I'll restart it and give another go!
@sirydog81 commented on GitHub (Nov 24, 2014):
Found what is happening:
When you start sendmailanalyzer it writes the main pid in sendmailanalyzer.pid and the tail pid in LAST_PARSED. And that is what blocks him.
root@ns:/var/run# /etc/rc.d/rc.sendmailanalyzer start
Starting SendmailAnalyzer Daemon...
root@ns:/etc/rc.d# cat /var/run/sendmailanalyzer.pid
11652
root@ns:/etc/rc.d# cat /var/lib/sendmailanalyzer/LAST_PARSED
Nov 24 09:33:49 ns sm-mta[11695]: sAO7XjxX011695: ruleset=check_rcpt, arg1=xxx.xxx@xxxx.xx, relay=out-01.xxx.xx [xx.xx.xx.xx], reject=550 5.7.1 xxx.xxx@xxxx.xx... Relaying denied 71197
thx
UPDATE:
it seems 71197 is just a random number or something
the correct pid for the tail process is root@ns:~#
ps -A | grep tail
11653 ? 00:00:00 tail
@darold commented on GitHub (Feb 18, 2015):
This number is not a random number, this is the offset/postition of the last line parse in the log file. It is used to go directly to that position instead or rereading the begining of the log file.
Regards,