Spam report score "out"

Questions and answers about how to do stuff
Post Reply
andreshko.georgiev
Posts: 11
Joined: 26 Dec 2016 22:47

Spam report score "out"

Post by andreshko.georgiev »

Hello colleagues,

I have a very strange situation. Rarely some of the SPAM messages that enter my organization go trough the SPAM filter into recipients' mailboxes. When I open the message, in the Spam Report section I see that the Spam score is "out" and the Matching Rule is "timed". Does somebody know what that mean and why this message that are definitely SPAM go trough and the message is stamped as Clear?
User avatar
shawniverson
Posts: 3644
Joined: 13 Jan 2014 23:30
Location: Indianapolis, Indiana USA
Contact:

Re: Spam report score "out"

Post by shawniverson »

Looks like a time out problem with spamassassin. Is your appliance getting overloaded?
andreshko.georgiev
Posts: 11
Joined: 26 Dec 2016 22:47

Re: Spam report score "out"

Post by andreshko.georgiev »

Hi,

I am using HP ProLiant ML350 G5 with 2 CPUs (8 Cores) and 16 GB of RAM. The installation is on the server not as a virtual machine. The version is 3.0.2.5. All firmwares are updated. Based on my monitoring system, the CPU load is between 2 and 3. Do you have any suggestions what can I check or which setting can I change?
Zwabber
Posts: 69
Joined: 14 Feb 2016 21:26

Re: Spam report score "out"

Post by Zwabber »

This could also be disk related. Just have a look at the disk(s).
andreshko.georgiev
Posts: 11
Joined: 26 Dec 2016 22:47

Re: Spam report score "out"

Post by andreshko.georgiev »

I checked it, seems OK.
Zwabber
Posts: 69
Joined: 14 Feb 2016 21:26

Re: Spam report score "out"

Post by Zwabber »

Don't know your disk(s), but sure there is no problem with the IOPS?
Especially due a spam attack the disk could be heavily overloaded.
andreshko.georgiev
Posts: 11
Joined: 26 Dec 2016 22:47

Re: Spam report score "out"

Post by andreshko.georgiev »

Hi, I don't think that it's from the disks because this behavior occurs only for mails that are sent to a specific e-mail address and only between 06:00 PM and 09:00 PM. In the same time interval other mails are processed normally.
Post Reply