efa-project.org

Posted: **05 Jan 2021 09:05**

In a freash install i found that MailScanner lind using interface takes 26 seconds, a lot of time
if i do in bash it takes about 1 second
Is there a problem in installation ? Your box are same ?

[root@EFA42 ~]# time MailScanner --lint
Trying to setlogsock(unix)

Reading configuration file /etc/MailScanner/MailScanner.conf
Reading configuration file /etc/MailScanner/conf.d/README
Read 868 hostnames from the phishing whitelist
Read 5807 hostnames from the phishing blacklists
Config: calling custom init function MailWatchLogging
MailWatch: Started MailWatch SQL Logging child
Config: calling custom init function SQLWhitelist
MailWatch: Starting up MailWatch SQL Whitelist
MailWatch: Read 2 whitelist entries
Config: calling custom init function SQLBlacklist
MailWatch: Starting up MailWatch SQL Blacklist
MailWatch: Read 0 blacklist entries

Checking version numbers...
Version number in MailScanner.conf (5.3.4) is correct.

Your envelope_sender_header in spamassassin.conf is correct.
MailScanner setting GID to (89)
MailScanner setting UID to (89)

Checking for SpamAssassin errors (if you use it)...
Using SpamAssassin results cache
Connected to SpamAssassin cache database
SpamAssassin reported no errors.
Connected to Processing Attempts Database
Created Processing Attempts Database successfully
There are 0 messages in the Processing Attempts Database
Using locktype = posix
MailScanner.conf says "Virus Scanners = clamd"
Found these virus scanners installed: clamd
===========================================================================
Filename Checks: Windows/DOS Executable (1 eicar.com)
Other Checks: Found 1 problems
Virus and Content Scanning: Starting
Clamd::INFECTED::{HEX}EICAR.TEST.3.UNOFFICIAL :: ./1/
Clamd::INFECTED:: {HEX}EICAR.TEST.3.UNOFFICIAL :: ./1/eicar.com
Virus Scanning: Clamd found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
===========================================================================
Virus Scanner test reports:
Clamd said "eicar.com was infected: {HEX}EICAR.TEST.3.UNOFFICIAL"

If any of your virus scanners (clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function MailWatchLogging
Config: calling custom end function SQLWhitelist
MailWatch: Closing down MailWatch SQL Whitelist
Config: calling custom end function SQLBlacklist
MailWatch: Closing down MailWatch SQL Blacklist

real 0m1.870s
user 0m1.213s
sys 0m0.220s

: Cattura.PNG (91.62 KiB) Viewed 9309 times

Posted: **05 Jan 2021 11:34**

Silly question - what version of efa/Mailscanner are you running?

I get the following:
Command line:

real 0m6.159s
user 0m4.212s
sys 0m0.872s

Web Interface

MailScanner Lint
Message Time
Trying to setlogsock(unix) 0
Reading configuration file /etc/MailScanner/MailScanner.conf 0.13883
Reading configuration file /etc/MailScanner/conf.d/README 0.01259
Config: calling custom init function SQLBlacklist 0.01953
MailWatch: Starting up MailWatch SQL Blacklist 2.0E-5
MailWatch: Read 0 blacklist entries 0.01674
Config: calling custom init function MailWatchLogging 2.0E-5
MailWatch: Started MailWatch SQL Logging child 0.01671
Config: calling custom init function SQLWhitelist 4.0E-5
MailWatch: Starting up MailWatch SQL Whitelist 8.0E-5
MailWatch: Read 3 whitelist entries 0.00251
Config: calling custom init function SQLWhitelist 1.0E-5
MailWatch: Starting up MailWatch SQL Whitelist 4.0E-5
MailWatch: Read 3 whitelist entries 0.00169
Checking version numbers... 0.00038
Version number in MailScanner.conf (5.3.4) is correct. 0.00012
Your envelope_sender_header in spamassassin.conf is correct. 0.00031
MailScanner setting GID to (89) 0.00187
MailScanner setting UID to (89) 0.0001
Checking for SpamAssassin errors (if you use it)... 7.0E-5
Using SpamAssassin results cache 0.18166
Connected to SpamAssassin cache database 0.00258
MailWatch: 4D99JH4ZnHzNL9kv: Logged to MailWatch SQL 1.69054
SpamAssassin reported no errors. 1.8848
Connected to Processing Attempts Database 0.0015
Created Processing Attempts Database successfully 0.00099
There are 0 messages in the Processing Attempts Database 0.00032
Using locktype = posix 0.00109
MailScanner.conf says "Virus Scanners = clamd" 0.00035
Found these virus scanners installed: clamd 0.19251
=========================================================================== 6.0E-5
Filename Checks: Windows/DOS Executable (1 eicar.com) 0.0234
Other Checks: Found 1 problems 0.02275
Virus and Content Scanning: Starting 5.0E-5
Clamd::INFECTED:: {HEX}EICAR.TEST.3.UNOFFICIAL :: ./1/eicar.com 0.22365
Virus Scanning: Clamd found 2 infections 0.1816
Infected message 1 came from 10.1.1.1 0.00031
Virus Scanning: Found 2 viruses 0.00017
=========================================================================== 0.00184
Virus Scanner test reports: 3.0E-5
Clamd said "eicar.com was infected: {HEX}EICAR.TEST.3.UNOFFICIAL" 0.0001
If any of your virus scanners (clamd) 2.0E-5
are not listed there, you should check that they are installed correctly 1.0E-5
and that MailScanner is finding them correctly via its virus.scanners.conf. 1.0E-5
Config: calling custom end function SQLBlacklist 0.00175
MailWatch: Closing down MailWatch SQL Blacklist 0.0002
Config: calling custom end function MailWatchLogging 3.0E-5
Config: calling custom end function SQLWhitelist 0.00103
MailWatch: Closing down MailWatch SQL Whitelist 3.0E-5
Config: calling custom end function SQLWhitelist 5.0E-5
MailWatch: Closing down MailWatch SQL Whitelist 9.0E-5
Finish - Total Time 5.87318

If you look closely, your numbers don't even add up to 26,8 seconds. Also, my numbers do not add up to 5.8 seconds

Posted: **05 Jan 2021 12:58**

Latest 4.0.3

Posted: **05 Jan 2021 13:04**

I use also a v3 of efa and mailscanner lint are identical in web and in shell
now with v4 i have this problem

Posted: **06 Jan 2021 06:50**

THere is a problem with SELINUX
If i disable it at all also lint in webinterface have same values

Posted: **06 Jan 2021 17:16**

Known issue (to me at least)

There is an interaction with SELinux and php-fpm. Not a problem, just an annoyance. The total does not reflect the actual Lint duration in the GUI as a result.

efa-project.org

MailWatch lint slow

MailWatch lint slow

Re: MailWatch lint slow

Re: MailWatch lint slow

Re: MailWatch lint slow

Re: MailWatch lint slow

Re: MailWatch lint slow