bounce back

prashantbhushan

prashantbhushan

Verified User
Joined
Jul 21, 2006
Messages
199
Location
Pune, India.
i got the following bounce back.
what would be the reason.

An error was detected while processing a file of BSMTP input.
> The error message was:
>
> 421 SMTP incoming data timeout - message abandoned
>
> The SMTP transaction started in line 0.
> The error was detected in line 3.
> 0 previous messages were successfully processed.
> The rest of the batch was abandoned.
> 421 SMTP incoming data timeout - message abandoned
> Transaction started in line 0
> Error detected in line 3


Thanks.
 
When this happens we've found it's generally because batch input to SpamAssassin isn't being handled quickly enough.

We resolve the issue by not using SpamAssassin.

Has anyone else found a different answer?

Jeff
 
SpamAssassin alternative?

If we don't use SpamAssassin...what are the alternatives?

My server load is generally quite low so it seems like there's no need for a hardware spam solution ($$$). Plenty of capacity for software solution.

Anything we can do to supercharge SpamAssassin?
 
We are suffering the same problem.. generally on servers with a lot of domains (note that are powerfull servers so low load)
We "played" wioth spamd and exim configurations but we don´t find yet the correct fix...
 
Had same problem yesterday:

421 Lost incoming connection

The SMTP transaction started in line 0.
The error was detected in line 3.
0 previous messages were successfully processed.
The rest of the batch was abandoned.
421 Lost incoming connection
Transaction started in line 0
Error detected in line 3

http://help.directadmin.com/item.php?id=156

Settings in Spamassassin setup in DA at the problem user:

Yes, block all spam scoring higher than: (1-99, no decimals) was checked and spamd child (perl) cpu went thru the roof, and mail bounces (whole server!). As soon as unchecked (and restart exim), cpu drops and does not rise anymore and mail comes thru. The rest of the SA settings below.

"Delete the spam."
"Low Threshold (5.0)"
"Use text-only attachments."

Regards,
Robert
 
Hello,

Check your /var/log/maillog.
Likely spamd isn't working correctly.. possibly missing perl modules, or it's possible it's not even running (make sure spamd is running).

Also check /var/log/exim/mainlog and /var/log/exim/paniclog

John
 
DirectAdmin Support said:
Hello,

Check your /var/log/maillog.
Likely spamd isn't working correctly.. possibly missing perl modules, or it's possible it's not even running (make sure spamd is running).

Also check /var/log/exim/mainlog and /var/log/exim/paniclog

John
Click to expand...

68051 2.1 Fri Feb 22 11:25:26 2008 spamd child (perl)
66609 1.1 Fri Feb 22 11:19:02 2008 spamd child (perl)
39576 0.0 Fri Feb 22 10:01:51 2008 /usr/bin/spamd -d -c -m 5 (perl)

Check your /var/log/maillog:

Feb 22 11:40:54 s16 spamd[66609]: bayes: cannot open bayes databases /home/aesav/.spamassassin/bayes_* R/W: lock failed: Disc quota exceeded
Feb 22 11:40:54 s16 spamd[66609]: spamd: identified spam (22.9/5.0) for aesav:1065 in 10.6 seconds, 957 bytes.
Feb 22 11:40:54 s16 spamd[66609]: spamd: result: Y 22 - RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_PBL,STOX_REPLY_TYPE,TRACKER_ID,TVD_FINGER_02,TVD_SPACE_RATIO,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=10.6,size=957,user=aesav,uid=1065,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=59158,mid=<01c8758a$ce788280$dbd04adc@corroborations54>,autolearn=unavailable
Feb 22 11:40:54 s16 spamd[39576]: prefork: child states: BB
Feb 22 11:40:54 s16 spamd[66609]: spamd: connection from localhost [127.0.0.1] at port 58106
Feb 22 11:40:54 s16 spamd[66609]: spamd: bad protocol: header error: (closed before headers) at /usr/bin/spamd line 2001.
Feb 22 11:40:54 s16 spamd[39576]: spamd: server successfully spawned child process, pid 71864
Feb 22 11:40:54 s16 spamd[39576]: prefork: child states: BBI
Feb 22 11:40:54 s16 spamd[39576]: prefork: child states: IBI
Feb 22 11:40:58 s16 spamd[68051]: bayes: cannot open bayes databases /home/aesav/.spamassassin/bayes_* R/W: lock failed: Disc quota exceeded
Feb 22 11:40:58 s16 spamd[68051]: spamd: identified spam (17.7/5.0) for aesav:1065 in 10.3 seconds, 1584 bytes.
Feb 22 11:40:58 s16 spamd[68051]: spamd: result: Y 17 - HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_IN_PBL,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=10.3,size=1584,user=aesav,uid=1065,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=63341,mid=<000601c8753f$6258b7f0$1ca7ba4f@x1>,autolearn=unavailable
Feb 22 11:40:58 s16 spamd[39576]: prefork: child states: III
Feb 22 11:40:58 s16 spamd[39576]: prefork: child states: IIK
Feb 22 11:40:58 s16 spamd[39576]: spamd: handled cleanup of child pid 71864 due to SIGCHLD

/var/log/exim/paniclog:

2008-02-22 10:00:05 queue run: process 38992 crashed with signal 15 while delivering 1JRFuo-000LW4-N6
2008-02-22 10:06:20 socket bind() to port 25 for address (any IPv4) failed: Address already in use: daemon abandoned
2008-02-22 10:30:54 queue run: process 48285 crashed with signal 15 while delivering 1JRa9p-000H2s-9q



Regards,
Robert
 
I would say this one is your winner:
Code: 
Feb 22 11:40:58 s16 spamd[68051]: bayes: cannot open bayes databases /home/aesav/.spamassassin/bayes_* R/W: lock failed: Disc quota exceeded
Type:
Code: 
quota -v aesav
to confirm that he's overquota. Delete some files ;)

John
 
Thanks John,

Does this mean that 1 user over quota can make SA hang?
Because, after getting rid of the files in the user "aesav", amd some others: 13813 69.4 Fri Feb 22 14:09:29 2008 spamd child (perl) is still going crazy.

My guess is something else is wrong here, that freaks up SA/Perl.

Suggestions welcome.

Regards,
Robert
 
FYI.

In DA I unchecked and checked SA for the user in question, so that the .spamassassin was newly made.
This results in no more "spamd: setuid to username failures" (and immediate .lock of the spamd child process pid) and no more spamd process hang (CPU load), so far...

Ran some tests also on other users sending mail and monitored the maillog for an hour and did not see anymore problems. SA scans normally...

Regards,
Robert
 
You must log in or register to reply here.
Back
Top