Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Problems with Spam Filter
  •  
amedina

Messages: 45
Karma: 0
Send a private message to this user
Hi all,
today morning, I found in the messages queue about 4,000 messages wating to be sent, and when I moved to "Message queue processing" tab found that all messages was in "Content Filter" statud. When I moved to the error log I found a huge amount of logs like this one:

"SpamClient.cpp: SpamAssassin cannot learn /opt/kerio/mailserver/store/tmp/SPAM_4850855371fb0effc0adb29 9c3a9e00f.eml as spam/ham."

and in the "Warining log" found:
"Spamassassin scanning /opt/kerio/mailserver/store/queue/25/4c166bc6-000fdf2b.eml has blocked external server.
SpamAssassin check of message file /opt/kerio/mailserver/store/queue/25/4c166bc6-000fdf2b.eml failed: no result returned"

This have happened frecuently since a couple of mounth, the only thing I can do is disable "Spam filter rating" and receive a let users receive a lot of spam untill the queue is lower and re-activate the spam filter rating.

Could be this a problem with SpamAsssasing? What can I do in this case?

Thank you and Best regards,
Amedina
  •  
id t

Messages: 50
Karma: 0
Send a private message to this user
Hi,

I have the same problem since several months. Can you please post your hardware configuration? The official answer from kerio is that the issue is hw-related (specifically, the speed of the disk subsystem where the mail store is), but I always suspected that this can be related to the spam filter itself.

I am running Kerio 7.0.1 (the problem was there with 6.7 and didn't went away with 7) on an 8-core XServe, 12GB RAM, the store is on an XSan volume (Promise VTrak with 16 1-TB 7200rpm disks in RAID5) on 4Gb dual fiber channel. I'm also serving files from the same volume.
  •  
freakinvibe

Messages: 1526
Karma: 60
Send a private message to this user
To find the root cause, turn on

"SpamAssassin Processing"

in the debug log and post the relevant information here.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
julienvs

Messages: 15

Karma: 0
Send a private message to this user
Same here,

Trying to download that log as plain text I get an "empty" 9mb file.
I downloaded it in html and that worked.
The log is converted back in plain text and in attachment.

Spammassassin crashes our server multiple times a day.

Kind regards,

Julien

  • Attachment: logs.txt.zip
    (Size: 28.37KB, Downloaded 220 times)
  •  
freakinvibe

Messages: 1526
Karma: 60
Send a private message to this user
It looks like your bayes DB is corrupted:

Quote:
bayes: not available for scanning, only 2 spam(s) in bayes DB < 200


This means it has only learned 2 mails as spam which is unrealistic if your mail server is running for a while.

What I would do is to reset the database and then restart Kerio Connect. To reset, stop Kerio and delete all files from store/spamassassin/bayes

It is good practice to backup that directory before deleting.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
julienvs

Messages: 15

Karma: 0
Send a private message to this user
Thanks for the good tip!
I'll do that.
Previous Topic: Change primary email address on Kerio server
Next Topic: Duplicate Emails When in Multiple Mailing Lists
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Sep 21 06:57:38 CEST 2017

Total time taken to generate the page: 0.00448 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.