From: Daniel S. <sd...@gl...> - 2007-03-21 06:39:32
|
Hello, I have the following setup=20 postfix-2.3.8 (compiled from sources) dk-milter-0.4.2 Suse Advanced Server 10 - Linux ads 2.6.16.27-0.6-smp #1 SMP Wed Dec 13 = 09:34:50 UTC 2006 x86_64 x86_64 x86_64 GNU/Linux The main.cf configuration: non_smtpd_milters =3D unix:/tmp/dkfilter.sock milter_default_action =3D accept milter_protocol =3D 3 The starting command of dk-filter is the following: /usr/bin/dk-filter -u postfix -b s -l -c nofws -p = /tmp/dkfilter.sock -d domain.com -s /var/lib/dk/selector1.key.pem -S = selector1 The messages are signed correctly but I get this annoying error in my = /var/log/maillog: Mar 21 08:28:26 ads dk-filter[11708]: B4AFD241BD3: dk_getsig(): resource = unavailable: Cannot allocate memory Mar 21 08:28:26 ads postfix/cleanup[11842]: B4AFD241BD3: milter-reject: = END-OF-MESSAGE from localhost[127.0.0.1]: 4.7.1 Service unavailable - = try again later; from=3Dw...@do... to=3D<ti...@ar...> I want to get rid of these errors. I also tested dkim-filter and he was working correctly. Sercaianu Daniel +40-788-837723 Global Internet Solutions SRL |
From: Murray S. K. <ms...@se...> - 2007-03-21 08:10:49
|
What's the size of your dk-filter process when this is happening? |
From: Daniel S. <sd...@gl...> - 2007-03-21 08:24:13
|
Hello, ps aux|grep dk-filter postfix 12709 0.0 0.0 38060 1664 ? Ssl 09:08 0:00 /usr/bin/dk-filter -u postfix -b s -l -c nofws -p /tmp/dkfilter.sock -d domain.com -s /var/lib/dk/selector1.key.pem -S selector1 It is always this big. It never grow bigger. I only want to sign locally generated mail. The signing process works perfectly but I have these errors. I also tried to install dk-milter-0.4.1 but I get the same result. Daniel Sercaianu Global Internet Solutions sd...@gl... GSM +40 788 837723 ----- Original Message ----- From: "Murray S. Kucherawy" <ms...@se...> To: "General discussion and usage issues" <dk-...@li...> Sent: Wednesday, March 21, 2007 10:10 Subject: Re: dk-milter-0.4.2 - dk_getsig(): resource unavailable: Cannotallocate memory > What's the size of your dk-filter process when this is happening? > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share > your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > dk-milter-discuss mailing list > dk-...@li... > https://lists.sourceforge.net/lists/listinfo/dk-milter-discuss > |
From: Murray S. K. <ms...@se...> - 2007-03-21 08:28:00
|
On Wed, 21 Mar 2007, Daniel Sercaianu wrote: > ps aux|grep dk-filter > postfix 12709 0.0 0.0 38060 1664 ? Ssl 09:08 0:00 > /usr/bin/dk-filter -u postfix -b s -l -c nofws -p /tmp/dkfilter.sock -d > domain.com -s /var/lib/dk/selector1.key.pem -S selector1 > > It is always this big. It never grow bigger. 38Mb is pretty big though. Mine on startup is not even 1Mb. My DKIM filter has been running about a week and it's only 3Mb. When I get some time to work on it again, I'll see if I can reproduce your condition. Do you have purify or something like it with which you can check its memory use? |
From: Daniel S. <sd...@gl...> - 2007-03-21 08:59:37
|
Hello, Please tell me what tools and from where to get them to install them on my server to help you fix the problem. Daniel Sercaianu Global Internet Solutions sd...@gl... GSM +40 788 837723 ----- Original Message ----- From: "Murray S. Kucherawy" <ms...@se...> To: "General discussion and usage issues" <dk-...@li...> Sent: Wednesday, March 21, 2007 10:27 Subject: Re: dk-milter-0.4.2 - dk_getsig(): resource unavailable:Cannotallocate memory > On Wed, 21 Mar 2007, Daniel Sercaianu wrote: >> ps aux|grep dk-filter >> postfix 12709 0.0 0.0 38060 1664 ? Ssl 09:08 0:00 >> /usr/bin/dk-filter -u postfix -b s -l -c nofws -p /tmp/dkfilter.sock -d >> domain.com -s /var/lib/dk/selector1.key.pem -S selector1 >> >> It is always this big. It never grow bigger. > > 38Mb is pretty big though. Mine on startup is not even 1Mb. My DKIM > filter has been running about a week and it's only 3Mb. > > When I get some time to work on it again, I'll see if I can reproduce your > condition. > > Do you have purify or something like it with which you can check its > memory use? > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share > your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > dk-milter-discuss mailing list > dk-...@li... > https://lists.sourceforge.net/lists/listinfo/dk-milter-discuss > |
From: Murray S. K. <ms...@se...> - 2007-03-21 10:18:03
|
On Wed, 21 Mar 2007, Daniel Sercaianu wrote: > Please tell me what tools and from where to get them to install them on my > server to help you fix the problem. Actually I'm inclined to give you a pre-release of the new code which has a lot more diagnostic information. Are you willing to run some experimental stuff, or is it a production environment? |
From: Daniel S. <sd...@gl...> - 2007-03-21 10:40:30
|
Hello, The answer is yes. It is a production environment, but I can do some tests with the new code. There are some periods in the day when I can safely skip signing the messages. Daniel Sercaianu Global Internet Solutions sd...@gl... GSM +40 788 837723 ----- Original Message ----- From: "Murray S. Kucherawy" <ms...@se...> To: "General discussion and usage issues" <dk-...@li...> Sent: Wednesday, March 21, 2007 12:17 Subject: Re: dk-milter-0.4.2 - dk_getsig(): resource unavailable:Cannotallocatememory > On Wed, 21 Mar 2007, Daniel Sercaianu wrote: >> Please tell me what tools and from where to get them to install them on >> my >> server to help you fix the problem. > > Actually I'm inclined to give you a pre-release of the new code which has > a lot more diagnostic information. > > Are you willing to run some experimental stuff, or is it a production > environment? > > ------------------------------------------------------------------------- > Take Surveys. Earn Cash. Influence the Future of IT > Join SourceForge.net's Techsay panel and you'll get the chance to share > your > opinions on IT & business topics through brief surveys-and earn cash > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > _______________________________________________ > dk-milter-discuss mailing list > dk-...@li... > https://lists.sourceforge.net/lists/listinfo/dk-milter-discuss > |
From: Murray S. K. <ms...@se...> - 2007-03-21 14:32:12
|
On Wed, 21 Mar 2007, Daniel Sercaianu wrote: > It is a production environment, but I can do some tests with the new code. > There are some periods in the day when I can safely skip signing the > messages. OK, I'll post a diff for you someplace. It's possible it's not a "can't allocate memory" error as much as a "you tried to allocate 0 bytes" error, which would indicate a bug rather than a leak. |
From: Tony E. <to...@he...> - 2007-03-21 09:51:09
|
Murray S. Kucherawy wrote, on 21. mar 2007 09:27: >> ps aux|grep dk-filter >> postfix 12709 0.0 0.0 38060 1664 ? Ssl 09:08 0:00 >> /usr/bin/dk-filter -u postfix -b s -l -c nofws -p /tmp/dkfilter.sock -d >> domain.com -s /var/lib/dk/selector1.key.pem -S selector1 >> >> It is always this big. It never grow bigger. > > 38Mb is pretty big though. Mine on startup is not even 1Mb. My DKIM > filter has been running about a week and it's only 3Mb. It almost certainly depends on the OS. On RHAS4 fully up2date I have: milter 2638 0.0 0.0 46468 1192 ? Ssl Jan31 0:43 /usr/bin/dk-filter -l -p inet:10003 -d barlaeus.nl -s /etc/certs/dk-filter/mail.private.pem -S mail -C bad=a,dns=t -u milter -H -m ORIGINATING -D -h -b s -c nofws ... been running since Jan31. dkim-filter gives 56740 for VSZ, up since Mar08. Both are called by Postfix 2.3 and been giving ok results. > When I get some time to work on it again, I'll see if I can reproduce your > condition. We use an INET socket rather than a Unix socket (mind you, this is still 0.4.1 - I've been chary about moving to 0.4.2 because of posters' experiences). Best, --Tonni -- Tony Earnshaw Email: tonni at hetnet dot nl |