Hello, Now I have empitied the /etc/mail/spamassassin directory and restarted amavisd-new. The top is this:
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 23081 amavis 17 0 87564 51m 37m S 4.7 1.3 0:00.53 amavisd 22392 amavis 17 0 92320 56m 37m S 4.3 1.4 0:01.68 amavisd 17198 amavis 17 0 85660 50m 36m S 0.3 1.3 0:02.38 amavisd Infact the amavisd process still use to much memory!!! I use Amavisd-new+sendmail platform... Can u tell me where is the mistake?? Thanks, PS: Here the list of te list of rules used before of disabling... -rw-r--r-- 1 root root 31854 Jun 2 02:00 70_sare_adult.cf -rw-r--r-- 1 root root 3839 Jun 2 02:00 70_sare_bayes_poison_nxm.cf -rw-r--r-- 1 root root 24246 Jun 2 02:00 70_sare_evilnum0.cf -rw-r--r-- 1 root root 1574 Jun 2 02:00 70_sare_evilnum1.cf -rw-r--r-- 1 root root 6970 Jun 2 02:00 70_sare_evilnum2.cf -rw-r--r-- 1 root root 171444 Jun 15 06:00 70_sare_genlsubj.cf -rw-r--r-- 1 root root 43455 Jul 3 06:00 70_sare_genlsubj0.cf -rw-r--r-- 1 root root 78643 Jul 3 06:00 70_sare_genlsubj1.cf -rw-r--r-- 1 root root 6212 Jun 15 06:00 70_sare_genlsubj2.cf -rw-r--r-- 1 root root 43635 Jun 15 06:00 70_sare_genlsubj3.cf -rw-r--r-- 1 root root 37368 Jun 15 06:00 70_sare_genlsubj_eng.cf -rw-r--r-- 1 root root 3706 Jun 15 06:00 70_sare_genlsubj_x30.cf -rw-r--r-- 1 root root 397594 Aug 7 03:00 70_sare_header.cf -rw-r--r-- 1 root root 120154 Aug 7 03:00 70_sare_header0.cf -rw-r--r-- 1 root root 137436 Aug 7 03:00 70_sare_header1.cf -rw-r--r-- 1 root root 59037 Aug 7 03:00 70_sare_header2.cf -rw-r--r-- 1 root root 80967 Aug 7 03:00 70_sare_header3.cf -rw-r--r-- 1 root root 5814 Aug 7 03:00 70_sare_header_eng.cf -rw-r--r-- 1 root root 5490 Jun 2 02:00 70_sare_header_x264_x30.cf -rw-r--r-- 1 root root 6353 Jun 2 02:00 70_sare_header_x30.cf -rw-r--r-- 1 root root 4448 Jun 2 02:00 70_sare_highrisk.cf -rw-r--r-- 1 root root 116029 Jul 3 06:00 70_sare_html.cf -rw-r--r-- 1 root root 32612 Jul 18 00:01 70_sare_html0.cf -rw-r--r-- 1 root root 46146 Jul 18 00:01 70_sare_html1.cf -rw-r--r-- 1 root root 7589 Jul 3 06:00 70_sare_html2.cf -rw-r--r-- 1 root root 29856 Jul 3 06:00 70_sare_html3.cf -rw-r--r-- 1 root root 22508 Jul 3 06:00 70_sare_html4.cf -rw-r--r-- 1 root root 2993 Jul 3 06:00 70_sare_html_eng.cf -rw-r--r-- 1 root root 2868 Jul 3 06:00 70_sare_html_x30.cf -rw-r--r-- 1 root root 155889 Jul 18 00:01 70_sare_obfu.cf -rw-r--r-- 1 root root 58118 Jun 11 22:00 70_sare_obfu0.cf -rw-r--r-- 1 root root 97771 Jul 18 00:01 70_sare_obfu1.cf -rw-r--r-- 1 root root 3547 Jun 2 02:00 70_sare_obfu2.cf -rw-r--r-- 1 root root 9163 Jun 2 02:00 70_sare_obfu3.cf -rw-r--r-- 1 root root 11298 Jun 2 02:00 70_sare_oem.cf -rw-r--r-- 1 root root 17656 Jun 2 02:00 70_sare_random.cf -rw-r--r-- 1 root root 373 Jun 2 02:00 70_sare_ratware.cf -rw-r--r-- 1 root root 47394 Jun 2 02:00 70_sare_specific.cf -rw-r--r-- 1 root root 6938 Jun 2 02:00 70_sare_spoof.cf -rw-r--r-- 1 root root 5172 Jun 2 02:00 70_sare_unsub.cf -rw-r--r-- 1 root root 18661 Jul 3 06:00 70_sare_uri0.cf -rw-r--r-- 1 root root 20681 Jul 3 06:00 70_sare_uri1.cf -rw-r--r-- 1 root root 9718 Jun 2 02:00 70_sare_uri3.cf -rw-r--r-- 1 root root 4447 Jun 2 02:00 70_sare_uri_eng.cf -rw-r--r-- 1 root root 34007 Aug 7 03:00 70_sare_whitelist.cf -rw-r--r-- 1 root root 24001 Aug 7 03:00 70_sare_whitelist_pre30.cf -rw-r--r-- 1 root root 6737 Jun 2 02:00 70_sc_top200.cf -rw-r--r-- 1 root root 13175 Jun 2 02:00 71_sare_bml_pre25x.cf -rw-r--r-- 1 root root 17992 Jun 2 02:00 71_sare_redirect_pre3.0.0.cf -rw-r--r-- 1 root root 13211 Jun 2 02:00 72_sare_bml_post25x.cf -rw-r--r-- 1 root root 15311 Jun 2 02:00 72_sare_redirect_post3.0.0.cf -rw-r--r-- 1 root root 10147 Jun 2 02:00 99_sare_fraud_post25x.cf -rw-r--r-- 1 root root 8813 Jun 2 02:00 99_sare_fraud_pre25x.cf drwxr-xr-x 2 root root 4096 Sep 15 15:36 RulesDuJour -rw-r--r-- 1 root root 14284 Apr 28 2004 antidrug.cf -rw-r--r-- 1 root root 2747510 Sep 15 10:46 blacklist-uri.cf -rw-r--r-- 1 root root 9487279 Sep 15 10:38 blacklist.cf -rw-r--r-- 1 root root 109810 Jun 22 18:00 bogus-virus-warnings.cf -rw-r--r-- 1 root root 4883 May 25 2004 random.cf -rw-r--r-- 1 root root 56238 Jun 2 02:00 tripwire.cf and inside the RuleDuJour directory: -rw-r--r-- 1 root root 31854 Jun 2 02:00 70_sare_adult.cf -rw-r--r-- 1 root root 3839 Jun 2 02:00 70_sare_bayes_poison_nxm.cf -rw-r--r-- 1 root root 24246 Jun 2 02:00 70_sare_evilnum0.cf -rw-r--r-- 1 root root 1574 Jun 2 02:00 70_sare_evilnum1.cf -rw-r--r-- 1 root root 6970 Jun 2 02:00 70_sare_evilnum2.cf -rw-r--r-- 1 root root 171444 Jun 15 06:00 70_sare_genlsubj.cf -rw-r--r-- 1 root root 43455 Jul 3 06:00 70_sare_genlsubj0.cf -rw-r--r-- 1 root root 78643 Jul 3 06:00 70_sare_genlsubj1.cf -rw-r--r-- 1 root root 6212 Jun 15 06:00 70_sare_genlsubj2.cf -rw-r--r-- 1 root root 43635 Jun 15 06:00 70_sare_genlsubj3.cf -rw-r--r-- 1 root root 37368 Jun 15 06:00 70_sare_genlsubj_eng.cf -rw-r--r-- 1 root root 3706 Jun 15 06:00 70_sare_genlsubj_x30.cf -rw-r--r-- 1 root root 397594 Aug 7 03:00 70_sare_header.cf -rw-r--r-- 1 root root 120154 Aug 7 03:00 70_sare_header0.cf -rw-r--r-- 1 root root 137436 Aug 7 03:00 70_sare_header1.cf -rw-r--r-- 1 root root 59037 Aug 7 03:00 70_sare_header2.cf -rw-r--r-- 1 root root 80967 Aug 7 03:00 70_sare_header3.cf -rw-r--r-- 1 root root 5814 Aug 7 03:00 70_sare_header_eng.cf -rw-r--r-- 1 root root 5490 Jun 2 02:00 70_sare_header_x264_x30.cf -rw-r--r-- 1 root root 6353 Jun 2 02:00 70_sare_header_x30.cf -rw-r--r-- 1 root root 4448 Jun 2 02:00 70_sare_highrisk.cf -rw-r--r-- 1 root root 116029 Jul 3 06:00 70_sare_html.cf -rw-r--r-- 1 root root 32612 Jul 18 00:01 70_sare_html0.cf -rw-r--r-- 1 root root 46146 Jul 18 00:01 70_sare_html1.cf -rw-r--r-- 1 root root 7589 Jul 3 06:00 70_sare_html2.cf -rw-r--r-- 1 root root 29856 Jul 3 06:00 70_sare_html3.cf -rw-r--r-- 1 root root 22508 Jul 3 06:00 70_sare_html4.cf -rw-r--r-- 1 root root 2993 Jul 3 06:00 70_sare_html_eng.cf -rw-r--r-- 1 root root 2868 Jul 3 06:00 70_sare_html_x30.cf -rw-r--r-- 1 root root 155889 Jul 18 00:01 70_sare_obfu.cf -rw-r--r-- 1 root root 58118 Jun 11 22:00 70_sare_obfu0.cf -rw-r--r-- 1 root root 97771 Jul 18 00:01 70_sare_obfu1.cf -rw-r--r-- 1 root root 3547 Jun 2 02:00 70_sare_obfu2.cf -rw-r--r-- 1 root root 9163 Jun 2 02:00 70_sare_obfu3.cf -rw-r--r-- 1 root root 11298 Jun 2 02:00 70_sare_oem.cf -rw-r--r-- 1 root root 17656 Jun 2 02:00 70_sare_random.cf -rw-r--r-- 1 root root 373 Jun 2 02:00 70_sare_ratware.cf -rw-r--r-- 1 root root 47394 Jun 2 02:00 70_sare_specific.cf -rw-r--r-- 1 root root 6938 Jun 2 02:00 70_sare_spoof.cf -rw-r--r-- 1 root root 5172 Jun 2 02:00 70_sare_unsub.cf -rw-r--r-- 1 root root 18661 Jul 3 06:00 70_sare_uri0.cf -rw-r--r-- 1 root root 20681 Jul 3 06:00 70_sare_uri1.cf -rw-r--r-- 1 root root 9718 Jun 2 02:00 70_sare_uri3.cf -rw-r--r-- 1 root root 4447 Jun 2 02:00 70_sare_uri_eng.cf -rw-r--r-- 1 root root 34007 Aug 7 03:00 70_sare_whitelist.cf -rw-r--r-- 1 root root 24001 Aug 7 03:00 70_sare_whitelist_pre30.cf -rw-r--r-- 1 root root 6737 Jun 2 02:00 70_sc_top200.cf -rw-r--r-- 1 root root 13175 Jun 2 02:00 71_sare_bml_pre25x.cf -rw-r--r-- 1 root root 17992 Jun 2 02:00 71_sare_redirect_pre3.0.0.cf -rw-r--r-- 1 root root 13211 Jun 2 02:00 72_sare_bml_post25x.cf -rw-r--r-- 1 root root 15311 Jun 2 02:00 72_sare_redirect_post3.0.0.cf -rw-r--r-- 1 root root 56238 Jun 2 02:00 99_FVGT_Tripwire.cf -rw-r--r-- 1 root root 10147 Jun 2 02:00 99_sare_fraud_post25x.cf -rw-r--r-- 1 root root 8813 Jun 2 02:00 99_sare_fraud_pre25x.cf -rw-r--r-- 1 root root 14284 Apr 28 2004 antidrug.cf -rw-r--r-- 1 root root 2717220 Sep 13 13:20 blacklist-uri.cf.20050914-1520 -rw-r--r-- 1 root root 2729508 Sep 14 15:20 blacklist-uri.cf.20050915-1533 -rw-r--r-- 1 root root 9383107 Sep 13 13:14 blacklist.cf.20050914-1459 -rw-r--r-- 1 root root 9427295 Sep 14 14:32 blacklist.cf.20050915-1522 -rw-r--r-- 1 root root 109810 Jun 22 18:00 bogus-virus-warnings.cf -rw-r--r-- 1 root root 4883 May 25 2004 random.current.cf -rw-r--r-- 1 root root 60101 Sep 1 20:12 rules_du_jour -rw-r--r-- 1 root root 9487279 Sep 15 10:38 sa-blacklist.current -rw-r--r-- 1 root root 2747510 Sep 15 10:46 sa-blacklist.current.uri.cf So I dont think that I use bigevil.cf... Excuse me, One question! Is backed up list used too if they are left in /etc/mail/spamassassin directory? Still thanx, rocsca ----- Original Message ----- From: "Nick Leverton" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, September 16, 2005 2:42 PM Subject: Re: [AMaViS-user] Incredible!! > On Fri, Sep 16, 2005 at 01:18:06PM +0200, Rocco Scappatura wrote: > > > > PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND > > 4060 amavis 25 0 311m 267m 37m R 56.4 6.7 0:22.24 amavisd > > 4061 amavis 25 0 312m 268m 37m R 50.1 6.8 0:24.69 amavisd > > Crivens! How many SA rules do you have ? I have quite a large number > of the SARE rulesets, and this is what it looks like here: > > USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND > amavis 21319 0.0 5.7 63560 22328 ? Ss Sep15 0:13 amavisd > amavis 29392 0.1 11.8 64380 45992 ? S 12:30 0:04 amavisd > amavis 29401 0.1 12.3 65144 47640 ? S 12:30 0:05 amavisd > > Do you by any chance still have the old bigevil.cf rules list ? Get rid > of it if so, that's several hundred Mb of rules, it was replaced by the > SCURI plugin for 2.64, and the built in URIBL rules in 3.0/3.1. > > I have found one or two mails that can make SA bloat like that, but not > as a common thing. > > Nick > > > ------------------------------------------------------- > SF.Net email is sponsored by: > Tame your development challenges with Apache's Geronimo App Server. > Download it for free - -and be entered to win a 42" plasma tv or your very > own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php > _______________________________________________ > AMaViS-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ ------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
