Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Subject: Re: Problem with massive log files
To: Jim McLachlan <jim@oss-ltd.com>, users@spamassassin.apache.org
References: <4c4bc75d-93f8-ce2e-1fd2-88bdb5748969@oss-ltd.com>
 <666bc24c-9677-508b-ecda-ea3b7a7c084e@oss-ltd.com>
 <84a0b185-af22-b21d-611a-a4f039fcaf21@guardiandigital.com>
 <ca6302de-7a48-3aea-fb35-98b84470c580@oss-ltd.com>
From: "Kevin A. McGrail" <KMcGrail@PCCC.com>
Message-ID: <b4a10417-5b80-f022-e04d-593fa518c44a@PCCC.com>
Date: Tue, 4 Apr 2017 18:19:44 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.8.0
MIME-Version: 1.0
In-Reply-To: <ca6302de-7a48-3aea-fb35-98b84470c580@oss-ltd.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
archived-at: Tue, 04 Apr 2017 22:19:57 -0000

On 4/4/2017 6:08 PM, Jim McLachlan wrote:
>     I thought spamfilter was spamassassin.
No, it's not.  It's what we would call the glue.  It's a content filter 
script that is reaching out to a spamassassin daemon called spamd using 
a lightweight c program called spamc.

SpamD allows for spamassassin to run and daemonize so you don't have to 
wait for perl compilation on each and every call.

So it's:

SMTP -> Postfix -> Spamfilter.sh->spamc->spamd and back again


In your master.cf for postfix, do you have anything like smtpd -v to 
turn on verbose logging?


Looking at your logs, I see tons of spamfilter calls but not very many 
smtp calls.  The logging doesn't have a queueid but checking the size= 
and the message id's they appear to be different messages.  So how are 
emails getting to spamfilter.sh?  Perhaps that is just because you took 
a small snapshot of the logs.

Overall I don't see repetitive logging but the GB size of the logs is 
impressive for a server running only 2 SPAMD children...

Regards,
KAM