Re: Sudden increase in spam?
I had noticed something like what you describe below some weeks ago
I discovered that when my system was under high load, some mail messages
were being delivered to mailboxes without having been scanned by
spamassassin. I suspected either a problem in spamassassin or my
delivery agent, which is maildrop. I avoided the problem by simply
doing away with the process which was taking up too much processing time
on that particular system, thus hiding the problem.
I would suspect spamassassin more strongly due to the possibility that it
is a kind of denial of service attack prevention mechanism. However, I did not notice any log
messages or header additions that would suggest this is true.
Good luck in your troubleshooting
On Mon, Dec 19, 2005 at 04:08:07PM +0100, martin f krafft wrote:
> also sprach John Goerzen <email@example.com> [2005.12.19.1541 +0100]:
> > I use spamassassin on my servers, but over the past week or so,
> > I've noticed a dramatic increase in spam. Have any of the rest of
> > you noticed this? Any clues as to what's going on, or more
> > importantly, how to block it?
> I've noticed something similar. Check whether the spam that gets
> through has the Spamassassin headers. Here, several spams get
> through apparently without any treatment by SA, although all
> incoming mail is fed to spamc. Maybe a bug?
> Please do not send copies of list mail to me; I read the list!
> .''`. martin f. krafft <firstname.lastname@example.org>
> : :' : proud Debian developer and author: http://debiansystem.info
> `. `'`
> `- Debian - when you have better things to do than fixing a system
> Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
> "no problem is so formidable
> that you can't just walk away from it."
> -- c. schulz
# Jesse Molina
# Mail = email@example.com
# Page = firstname.lastname@example.org
# Cell = 1.602.323.7608
# Web = http://www.opendreams.net/jesse/