Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #160285 > unrolled thread

dspam silently (perhaps) crashing

Started byAlan Chandler <alan@chandlerfamily.org.uk>
First post2015-11-07 20:40 +0100
Last post2015-11-08 18:50 +0100
Articles 8 — 5 participants

Back to article view | Back to linux.debian.user


Contents

  dspam silently (perhaps) crashing Alan Chandler <alan@chandlerfamily.org.uk> - 2015-11-07 20:40 +0100
    Re: dspam silently (perhaps) crashing Sven Arvidsson <sa@whiz.se> - 2015-11-07 21:00 +0100
      Re: dspam silently (perhaps) crashing Jochen Spieker <ml@well-adjusted.de> - 2015-11-08 00:30 +0100
        Re: dspam silently (perhaps) crashing Gilles Mocellin <gilles.mocellin@nuagelibre.org> - 2015-11-08 02:10 +0100
          Re: dspam silently (perhaps) crashing Erwan David <erwan@rail.eu.org> - 2015-11-08 09:10 +0100
            Re: dspam silently (perhaps) crashing Alan Chandler <alan@chandlerfamily.org.uk> - 2015-11-08 12:30 +0100
              Re: dspam silently (perhaps) crashing Alan Chandler <alan@chandlerfamily.org.uk> - 2015-11-08 15:10 +0100
          Re: dspam silently (perhaps) crashing Jochen Spieker <ml@well-adjusted.de> - 2015-11-08 18:50 +0100

#160285 — dspam silently (perhaps) crashing

FromAlan Chandler <alan@chandlerfamily.org.uk>
Date2015-11-07 20:40 +0100
Subjectdspam silently (perhaps) crashing
Message-ID<qshvb-6vE-9@gated-at.bofh.it>
I run a small raspberry pi as my home mail server.

Over the last couple of days, my wife has reported to me that she hasn't 
seen any mail for a while.

After a bit of investigation I found that if I did

service dspam status

It would show its status as active(exited).

In order to start it again I have to do

service dspam restart

(a service dspam start won't do it).

This happened to me yesterday evening

Again today, I stopped receiving e-mail and sure enough dspam had failed 
again.

I started again, and within a few minutes it had stopped.

I tried
journalctl _SYSTEM_UNIT=dspam.service

but there didn't appear to be any entries in there.

How can I find out why dpam is falling over

-- 
Alan Chandler
http://www.chandlerfamily.org.uk

[toc] | [next] | [standalone]


#160287

FromSven Arvidsson <sa@whiz.se>
Date2015-11-07 21:00 +0100
Message-ID<qshOy-6Ci-9@gated-at.bofh.it>
In reply to#160285

[Multipart message — attachments visible in raw view] — view raw

On Sat, 2015-11-07 at 19:21 +0000, Alan Chandler wrote:
[...]
> How can I find out why dpam is falling over

If it's the same dspam that was previously in Debian, it has been
removed and is apparently no longer developed, so maybe looking for
alternatives would be a better option?

-- 
Cheers,
Sven Arvidsson
http://www.whiz.se
PGP Key ID 6FAB5CD5



[toc] | [prev] | [next] | [standalone]


#160294

FromJochen Spieker <ml@well-adjusted.de>
Date2015-11-08 00:30 +0100
Message-ID<qsl5L-pn-11@gated-at.bofh.it>
In reply to#160287

[Multipart message — attachments visible in raw view] — view raw

Sven Arvidsson:
> On Sat, 2015-11-07 at 19:21 +0000, Alan Chandler wrote:
> [...]
>> How can I find out why dpam is falling over
> 
> If it's the same dspam that was previously in Debian, it has been
> removed and is apparently no longer developed, so maybe looking for
> alternatives would be a better option?

Oh, crap. Thanks for the hint. I am also using dspam. I have it
configured as content filter in Postfix.

Does anybody know an alternative to dspam, that I can integrate with
Postfix and Dovecot? I want to be able to train the filter for
individual users by doing something like moving mail into/out of a junk
folder in Dovecot.

J.
-- 
Tony Blair is a hypnotised self-seeking scarecrow just like all the
rest.
[Agree]   [Disagree]
                 <http://www.slowlydownward.com/NODATA/data_enter2.html>

[toc] | [prev] | [next] | [standalone]


#160296

FromGilles Mocellin <gilles.mocellin@nuagelibre.org>
Date2015-11-08 02:10 +0100
Message-ID<qsmEx-1sE-1@gated-at.bofh.it>
In reply to#160294
Le 08/11/2015 00:27, Jochen Spieker a écrit :
> Sven Arvidsson:
>> On Sat, 2015-11-07 at 19:21 +0000, Alan Chandler wrote:
>> [...]
>>> How can I find out why dpam is falling over
>> If it's the same dspam that was previously in Debian, it has been
>> removed and is apparently no longer developed, so maybe looking for
>> alternatives would be a better option?
> Oh, crap. Thanks for the hint. I am also using dspam. I have it
> configured as content filter in Postfix.
>
> Does anybody know an alternative to dspam, that I can integrate with
> Postfix and Dovecot? I want to be able to train the filter for
> individual users by doing something like moving mail into/out of a junk
> folder in Dovecot.
>
> J.
Hello,

I use now rspam : https://rspamd.com/

I found a blog in French describing the configuration, for postfix and 
dovecot :
http://philpep.org/blog/rspamd-un-antispam-performant

[toc] | [prev] | [next] | [standalone]


#160306

FromErwan David <erwan@rail.eu.org>
Date2015-11-08 09:10 +0100
Message-ID<qstcZ-60t-1@gated-at.bofh.it>
In reply to#160296
Le 08/11/2015 01:51, Gilles Mocellin a écrit :
> Le 08/11/2015 00:27, Jochen Spieker a écrit :
>> Sven Arvidsson:
>>> On Sat, 2015-11-07 at 19:21 +0000, Alan Chandler wrote:
>>> [...]
>>>> How can I find out why dpam is falling over
>>> If it's the same dspam that was previously in Debian, it has been
>>> removed and is apparently no longer developed, so maybe looking for
>>> alternatives would be a better option?
>> Oh, crap. Thanks for the hint. I am also using dspam. I have it
>> configured as content filter in Postfix.
>>
>> Does anybody know an alternative to dspam, that I can integrate with
>> Postfix and Dovecot? I want to be able to train the filter for
>> individual users by doing something like moving mail into/out of a junk
>> folder in Dovecot.
>>
>> J.
> Hello,
>
> I use now rspam : https://rspamd.com/
>
> I found a blog in French describing the configuration, for postfix and
> dovecot :
> http://philpep.org/blog/rspamd-un-antispam-performant
>
>
>
>

I had a look at rspam and did not use it : i find it far too much
invasive, it practically impose tons of tests that I do not want to be
done because of false positives.
(and worse when a new version comes with new tests they are enabled by
default).

I found it also rather difficult to configure.

So I stayed with dspam, which despite not being more developped is
robust and does its job : bayesian filtering.

[toc] | [prev] | [next] | [standalone]


#160310

FromAlan Chandler <alan@chandlerfamily.org.uk>
Date2015-11-08 12:30 +0100
Message-ID<qswky-7Wb-9@gated-at.bofh.it>
In reply to#160306
On 08/11/15 08:00, Erwan David wrote:
> I had a look at rspam and did not use it : i find it far too much 
> invasive, it practically impose tons of tests that I do not want to be 
> done because of false positives. (and worse when a new version comes 
> with new tests they are enabled by default). I found it also rather 
> difficult to configure. So I stayed with dspam, which despite not 
> being more developped is robust and does its job : bayesian filtering. 

I have now removed it from the main mail path, but am still sending spam 
and ham retraining requests to it. It has now stayed up for a whole day.

I followed your quest round the internet looking for a replacement. In 
this process I did discover someone who was experiencing silent exits of 
dspam.
The current dspam maintainer was saying that the hash driver could get 
into trouble because it copies a file into memory and if this got 
corrupt then it would cause dspam to crash.

I am wondering if I can find that file and remove it.  Just don't know 
where to look

--
Alan Chandler http://www.chandlerfamily.org.uk

[toc] | [prev] | [next] | [standalone]


#160312

FromAlan Chandler <alan@chandlerfamily.org.uk>
Date2015-11-08 15:10 +0100
Message-ID<qsyPn-18x-3@gated-at.bofh.it>
In reply to#160310
On 08/11/15 11:20, Alan Chandler wrote:
> On 08/11/15 08:00, Erwan David wrote:
>> I had a look at rspam and did not use it : i find it far too much 
>> invasive, it practically impose tons of tests that I do not want to 
>> be done because of false positives. (and worse when a new version 
>> comes with new tests they are enabled by default). I found it also 
>> rather difficult to configure. So I stayed with dspam, which despite 
>> not being more developped is robust and does its job : bayesian 
>> filtering. 
>
> I have now removed it from the main mail path, but am still sending 
> spam and ham retraining requests to it. It has now stayed up for a 
> whole day.
>
> I followed your quest round the internet looking for a replacement. In 
> this process I did discover someone who was experiencing silent exits 
> of dspam.
> The current dspam maintainer was saying that the hash driver could get 
> into trouble because it copies a file into memory and if this got 
> corrupt then it would cause dspam to crash.
>
> I am wondering if I can find that file and remove it.  Just don't know 
> where to look
>
> -- 
> Alan Chandler http://www.chandlerfamily.org.uk
>
I did find the hash database, they were in /var/spool/dspam/data

I put dspam back in my mail delivery path (postfix delivers to dspam 
delivers to dovecot), deleted the has files for each individual user and 
dspam has now stayed up for the last three hours.

So I am concluding that it is corrupted hash files.

I might look at migrating to one of the other drivers which use a proper 
database,


-- 
Alan Chandler
http://www.chandlerfamily.org.uk

[toc] | [prev] | [next] | [standalone]


#160318

FromJochen Spieker <ml@well-adjusted.de>
Date2015-11-08 18:50 +0100
Message-ID<qsCgi-3bc-17@gated-at.bofh.it>
In reply to#160296

[Multipart message — attachments visible in raw view] — view raw

Gilles Mocellin:
> Le 08/11/2015 00:27, Jochen Spieker a écrit :
>> 
>> Does anybody know an alternative to dspam, that I can integrate with
>> Postfix and Dovecot? I want to be able to train the filter for
>> individual users by doing something like moving mail into/out of a junk
>> folder in Dovecot.
> 
> I use now rspam : https://rspamd.com/
> 
> I found a blog in French describing the configuration, for postfix and
> dovecot :
> http://philpep.org/blog/rspamd-un-antispam-performant

Thanks! I will look into this.

J.
-- 
I have been manipulated and permanently distorted.
[Agree]   [Disagree]
                 <http://www.slowlydownward.com/NODATA/data_enter2.html>

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web