Duplicate spamd lines in Postfix log file

classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

Duplicate spamd lines in Postfix log file

dpjanda
Greetings

I hope someone can help with what is not a problem as such, but a query. In
every Spamassassin (spamd) exchange there appears to be two lines that are
*almost* identicle.

Jun 29 09:20:09 email spamd[2142]: spamd: connection from ::1 [::1]:57558 to
port 783, fd 5
Jun 29 09:20:09 email spamd[2142]: spamd: processing message
<20190627140139?[hidden email]> for spamd:5001
Jun 29 09:20:10 email spamd[1101]: util: setuid: ruid=5001 euid=5001
rgid=5001 5001 5001 egid=5001 5001 5001
Jun 29 09:20:15 email spamd[1102]: util: setuid: ruid=5001 euid=5001
rgid=5001 5001 5001 egid=5001 5001 5001
Jun 29 09:20:18 email spamd[2142]: spamd: identified spam (3.0/3.0) for
spamd:5001 in 8.4 seconds, 16236 bytes.
Jun 29 09:20:18 email spamd[2142]: spamd: result: Y 3 - blah blah blah
Jun 29 09:20:18 email spamd[1550]: prefork: child states: II

It's the util: setuid lines. As stated, all is well, but can someone tell me
why this is the case, and if there is an actual problem?

Many thanks

dpjanda



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

Wietse Venema
dpjanda:
> Jun 29 09:20:10 email spamd[1101]: util: setuid: ruid=5001 euid=5001
> rgid=5001 5001 5001 egid=5001 5001 5001
> Jun 29 09:20:15 email spamd[1102]: util: setuid: ruid=5001 euid=5001
> rgid=5001 5001 5001 egid=5001 5001 5001

First, these lines are logged by different spamd processes.

Second, this is not a Postfix logfile. It's a file that contains
logging from multiple programs.

        Wietser
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

dpjanda
Thanks.

Yes, I should have clarified that my log file is from multiple sources.
Sorry about that.

Is it normal to have more than one spamd process per message?

Regards



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

Wietse Venema
dpjanda:
> Thanks.
>
> Yes, I should have clarified that my log file is from multiple sources.
> Sorry about that.
>
> Is it normal to have more than one spamd process per message?

This is the POSTFIX mailing list.
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

dpjanda
It sure is is, and that's why I posted the original question here. As it
could, perhaps, be an error on my part how I call it from POSTFIX, so I
thought I would ask the question here, first.



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

Matus UHLAR - fantomas
On 30.06.19 06:36, dpjanda wrote:
>It sure is is, and that's why I posted the original question here. As it
>could, perhaps, be an error on my part how I call it from POSTFIX, so I
>thought I would ask the question here, first.

you have not attached any information about how you call spamd from postfix.
However, only process 2142 seems to be related to the mail you are
receiving.
--
Matus UHLAR - fantomas, [hidden email] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Spam = (S)tupid (P)eople's (A)dvertising (M)ethod
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

dpjanda
Thanks Matus

In main.cf

virtual_transport=spamass-dovecot

In master.cf

spamass-dovecot unix -     n       n       -       -       pipe
  flags=DRhu user=vmail:vmail argv=/usr/bin/spamc -u spamd -e
/usr/lib/dovecot/deliver -d ${recipient}

I hope this helps.

Regards



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Duplicate spamd lines in Postfix log file

Bill Cole-3
In reply to this post by dpjanda
On 30 Jun 2019, at 9:36, dpjanda wrote:

> It sure is is, and that's why I posted the original question here. As
> it
> could, perhaps, be an error on my part how I call it from POSTFIX, so
> I
> thought I would ask the question here, first.

The [hidden email] list would be a far better place for
it, as this is entirely about spamd, a component of SpamAssasssin.

Having written some of the code involved in spamd switching to specific
users, I believe that what you're seeing is normal, at least for some
configurations. As I am not currently working with any system that uses
spamd with per-user configurations, I am hesitant to make a definitive
assertion.

I am almost certain that you can get a more definitive answer on the
right mailing list.

--
Bill Cole
[hidden email] or [hidden email]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire