Re: Sudden increase in spam?
Hi!
I had noticed something like what you describe below some weeks ago
after upgrading.
I discovered that when my system was under high load, some mail messages
were being delivered to mailboxes without having been scanned by
spamassassin. I suspected either a problem in spamassassin or my
delivery agent, which is maildrop. I avoided the problem by simply
doing away with the process which was taking up too much processing time
on that particular system, thus hiding the problem.
I would suspect spamassassin more strongly due to the possibility that it
is a kind of denial of service attack prevention mechanism. However, I did not notice any log
messages or header additions that would suggest this is true.
Good luck in your troubleshooting
On Mon, Dec 19, 2005 at 04:08:07PM +0100, martin f krafft wrote:
> also sprach John Goerzen <jgoerzen@complete.org> [2005.12.19.1541 +0100]:
> > I use spamassassin on my servers, but over the past week or so,
> > I've noticed a dramatic increase in spam. Have any of the rest of
> > you noticed this? Any clues as to what's going on, or more
> > importantly, how to block it?
>
> I've noticed something similar. Check whether the spam that gets
> through has the Spamassassin headers. Here, several spams get
> through apparently without any treatment by SA, although all
> incoming mail is fed to spamc. Maybe a bug?
>
> --
> Please do not send copies of list mail to me; I read the list!
>
> .''`. martin f. krafft <madduck@debian.org>
> : :' : proud Debian developer and author: http://debiansystem.info
> `. `'`
> `- Debian - when you have better things to do than fixing a system
>
> Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
>
> "no problem is so formidable
> that you can't just walk away from it."
> -- c. schulz
--
# Jesse Molina
# Mail = jesse@opendreams.net
# Page = page-jesse@opendreams.net
# Cell = 1.602.323.7608
# Web = http://www.opendreams.net/jesse/
Reply to: