[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Unintended loss of spam...



Hi!

Being used to the steady stream of e-mail from debian-user and other 
lists, the natural reaction when I came back from lunch to "No new 
messages" was "WTF?"

So I began looking into logs, and while it seems that there were no 
messages between about 14:01 and 14:51 (that's OK), there is one 
message that I haven't seen:

2004-02-13 14:34:23 1ArdSU-00056O-Nw <= 
kartkomiteen-owner@osi.uio.no.spam[munge] H=pat.uio.no [129.240.130.16] 
U=7411 P=esmtp S=5086 id=UCSOTRYMQVIYFKKZFPKAQ@comcast.net
2004-02-13 14:34:23 1ArdSU-00056O-Nw => kjetil <kjetil@kjernsmo.net> 
R=local_user T=mail_spool
2004-02-13 14:34:23 1ArdSU-00056O-Nw Completed

The message ID smells of spam, and while I have exiscan-acl to reject 
spam above 12, it will state it plainly if it does. 


In the syslog, it seems that it was indeed marked as spam:

Feb 13 14:34:18 pooh spamd[13139]: connection from localhost [127.0.0.1] 
at port 40657
Feb 13 14:34:18 pooh spamd[19617]: info: setuid to nobody succeeded
Feb 13 14:34:18 pooh spamd[19617]: checking message 
<UCSOTRYMQVIYFKKZFPKAQ@comcast.net> for nobody:65534.
Feb 13 14:34:23 pooh spamd[19617]: identified spam (6.9/5.0) for 
nobody:65534 in 4.7 seconds, 3380 bytes.


So, it seems I lost a spam message. 

So what, you may say...? :-) Well, I don't like the idea of loosing 
messages without intending to... 

I have seen it err at the opposite end as well, failing to scan spam, it 
happens with about 1 in 5000 messages, I would estimate. Easier to live 
with, because at least I know when it happens. 

I'm using the backports.org package: 2.63-0.backports.org.1

Well, it isn't a lot to go on here, I guess, but I thought I'd share it 
just to hear your opinion. 

Cheers,

Kjetil
-- 
Kjetil Kjernsmo
Astrophysicist/IT Consultant/Skeptic/Ski-orienteer/Orienteer/Mountaineer
kjetil@kjernsmo.net  webmaster@skepsis.no  editor@learn-orienteering.org
Homepage: http://www.kjetil.kjernsmo.net/        OpenPGP KeyID: 6A6A0BBC



Reply to: