This morning I wake up to find my server extremely slow. After about 5 minutes I was able to finally get to the command line on the box. I check out the memory usage and it showed only 3 megs available. I checked the processes and noticed spamd having multiple instances with it ran by nobody and with the processing up to 99% with memory at 70%. Apparently whenever this started SA stopped working because I have people telling me they got a bunch of spam in their mailbox and when you look at the headers it has question marks instead of points for the SA section.
Now the weird part is nobody would never run spamd, only the qmailscanner. Also I noticed it wasnt its usual line, instead of the normal spamd -h -m5 then a couple of other flags, it was showing spamd -u [EMAIL PROTECTED] When I tried restarting SA the same issue was happening, it required me to stop it for a few minutes and then bring it back up. After that all is well. Any idea what happened? Could this have been a hack? Anyway of preventing this? Thanks Robert
