[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Sudden increase in spam?


I had noticed something like what you describe below some weeks ago
after upgrading.

I discovered that when my system was under high load, some mail messages
were being delivered to mailboxes without having been scanned by
spamassassin.  I suspected either a problem in spamassassin or my
delivery agent, which is maildrop.  I avoided the problem by simply
doing away with the process which was taking up too much processing time
on that particular system, thus hiding the problem.

I would suspect spamassassin more strongly due to the possibility that it
is a kind of denial of service attack prevention mechanism.  However, I did not notice any log
messages or header additions that would suggest this is true.

Good luck in your troubleshooting

On Mon, Dec 19, 2005 at 04:08:07PM +0100, martin f krafft wrote:
> also sprach John Goerzen <jgoerzen@complete.org> [2005.12.19.1541 +0100]:
> > I use spamassassin on my servers, but over the past week or so,
> > I've noticed a dramatic increase in spam.  Have any of the rest of
> > you noticed this?  Any clues as to what's going on, or more
> > importantly, how to block it?
> I've noticed something similar. Check whether the spam that gets
> through has the Spamassassin headers. Here, several spams get
> through apparently without any treatment by SA, although all
> incoming mail is fed to spamc. Maybe a bug?
> -- 
> Please do not send copies of list mail to me; I read the list!
>  .''`.     martin f. krafft <madduck@debian.org>
> : :'  :    proud Debian developer and author: http://debiansystem.info
> `. `'`
>   `-  Debian - when you have better things to do than fixing a system
> Invalid/expired PGP (sub)keys? Use subkeys.pgp.net as keyserver!
> "no problem is so formidable
>  that you can't just walk away from it."
>                                                           -- c. schulz

# Jesse Molina
# Mail = jesse@opendreams.net
# Page = page-jesse@opendreams.net
# Cell = 1.602.323.7608
# Web  = http://www.opendreams.net/jesse/

Reply to: