Hi Francesco,
At 00:34 19-09-2008, Vincenti Francesco wrote:
>My system has the following characteristics:
>- A two nodes cluster based, active-active, one for the
>incoming email and the other for the outgoing email. If a node
>crashes, the other brings the service on its shoulders.
>- Each node has 4GB RAM and two processors
>- O.S. Fedora core 3
>- Mail server qmail 1.0.3
>- Antivirus clamav 0.87.1
>- Antispam spamassassin 3.0.4
>- Cluster controller heartbeat
>- Interface qmail-scanner-queue.pl


That version of SpamAssassin is quite old.

>Starting from the 15th of July, I find, sometimes, in the log file
>of qmail-scanner-queue.pl the following alert instead of normal
>score: SA: finished scan in 600.010015 secs - hits=?/?.
>I have already searched on the official site of spamassassin and it
>seems to be generated by some kind of trouble using the web
>scansion. I really used pyzor and razor2 scansion, so I took them
>out from local.cf. This action caused the decrease of average
>processing time from 15 seconds to 3.5 seconds for each treated
>email. But I still have some kind of web search because the system
>is configured to use RBL search too, and I can't take it out. The
>time has been improved but the problem stays!
>I have to write and to upgrade a local configuration file, named
>local_rules.cf which has reached the dimension of 250KB it is very
>useful to stop a lot of SPAM which is not stopped by the other
>rules. The problem started to appear after one of the upgrade I
>usually have to do, which wasn't so dramatic to justify this
>behaviour, I think.


I gather that you have read
http://wiki.apache.org/spamassassin/FasterPerformance The large
local rules file will affect performance. If you want to keep pyzor
and razor2, see http://wiki.apache.org/spamassassin/UsingNetworkTests
on how to reduce the timeout values. Run spamd with the -D switch to
find out whether there are any errors.

Regards,
-sm