From owner-freebsd-pf@FreeBSD.ORG Fri Aug 10 10:01:55 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4A16716A41A for ; Fri, 10 Aug 2007 10:01:55 +0000 (UTC) (envelope-from ohauer@gmx.de) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.freebsd.org (Postfix) with SMTP id B2F8713C4DE for ; Fri, 10 Aug 2007 10:01:54 +0000 (UTC) (envelope-from ohauer@gmx.de) Received: (qmail 1519 invoked by uid 0); 10 Aug 2007 09:35:13 -0000 Received: from 213.61.170.34 by www006.gmx.net with HTTP; Fri, 10 Aug 2007 11:35:08 +0200 (CEST) Content-Type: text/plain; charset="iso-8859-1" Date: Fri, 10 Aug 2007 11:35:08 +0200 From: "Olli Hauer" In-Reply-To: Message-ID: <20070810093508.280560@gmx.net> MIME-Version: 1.0 References: To: "Jeremy C. Reed" , freebsd-pf@freebsd.org X-Authenticated: #1956535 X-Flags: 0001 X-Mailer: WWW-Mail 6100 (Global Message Exchange) X-Priority: 3 X-Provags-ID: V01U2FsdGVkX19iMOsem9Ji8BvDiIEhoQGf5l5K3Bmq7W/5ku1ojU APKWo52/FRll7FgWQmP3+jtYh5eSdqTBZfuw== Content-Transfer-Encoding: 8bit X-GMX-UID: N1XUC6MMbHIhVMXiJDQ0KAsiJihyapDP Cc: Subject: Re: do you use spamd with sync? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Aug 2007 10:01:55 -0000 -------- Original-Nachricht -------- Datum: Thu, 9 Aug 2007 20:50:37 -0500 (CDT) Von: "Jeremy C. Reed" An: freebsd-pf@freebsd.org Betreff: do you use spamd with sync? > (Maybe I should post this to the freebsdspamd berlios list instead??) > > If you use spamd, can you please check your logs for errors like: > > zgrep -E "bogus entry|can't delete|scan.*failed" /var/log/messages.*z > > (If that is where you log to.) > > I have many errors and I can't track down why or what is corrupted. > > One interesting result is that it will attempt to whitelist the same entry > tens of thousands of times in less than one minute. And my CPU load will > go high. And my spamd memory usage goes up ten times. I have moved my > spamd databases out of the way around 20 times. But new corruption > continues. I have been running spamd for over a year now. > > I am thing it might be related to my sync usage ... > > Do any of you use the -Y and -y options? > > I only use it with unicast. > > So my -Y is an hostname. So sync_addhost is successful (and my debugging > shows the "added spam sync host" line) so sync_iface stays NULL. > > And sync_init() is ran with that as NULL. The code does: > > if (iface != NULL) > sendmcast++; > > So I am not multicast. Good. > > But then the code resets it: > > if (iface == NULL) > iface = baddr; > > And then: > > /* Don't use multicast messages */ > if (iface == NULL) > return (syncfd); > > (I added fprintf(stderr debugging to verify this.) > > So it doesn't return even though I am not using multicast which it > attempts to setup. > > So added a return (syncfd); anyways since it wouldn't work with out it. > > I am guessing that I am the only person in the world using it with > unicast. I have asked about this a couple times on the OpenBSD tech list, > but no feedback on that there. > > Maybe the unicast method is broken? I'd appreciate to hear anyone's > experiences with using this. > > I have been using it since sync it existed -- maybe around February. > > Jeremy C. Reed Hi Jeremy, read about your issues at tech@openbsd, no issues here with sync (even between OpenBDS/FreeBSD servers). # my entries from rc.conf.local ################################################# # spamd + spamlogd obspamd_hostname="-h mx.mydomain.tld" obspamd_banner="-n \"Postfix-spamd IP-based SPAM blocker\"" obspamd_trapp_ip="-M 192.168.1.23" obspamd_sync_ip="-y 192.168.1.20" obspamd_sync_peer="-Y 192.168.1.10 -Y 192.168.1.30" obspamd_enable="YES" obspamd_flags="-5 -v -l127.0.0.1 -S10 -s10 -G 15:6:864 ${obspamd_hostname} ${obspamd_banner} ${obspamd_trapp_ip} ${obspamd_sync_ip} ${obspamd_sync_peer}" obspamlogd_enable="YES" obspamlogd_flags="-i fxp0 ${obspamd_sync_peer}" The patch for spamdb PR 5475 is also in the freebsd port. http://svn.berlios.de/viewcvs/freebsdspamd/trunk/spamdb/spamdb.c?rev=50&view=log olli -- Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kanns mit allen: http://www.gmx.net/de/go/multimessenger