From your description, it sounds like spamdyke is overwhelming the DNS daemon on your server. That's not too hard to imagine -- spamdyke's DNS resolver code is pretty aggressive by default. Your configuration file doesn't include a timeout command, so it's possible the spamdyke processes were still running correctly (even without working DNS), waiting for the remote servers to disconnect correctly.
spamdyke offers a number of options for tuning DNS behavior. For starters, you could try setting the "dns-level" option to "normal" so it will send one query at a time instead of multiple queries in bursts. That will slow down DNS resolution but it will be more gentle to your DNS daemon. You could also try removing some of the RBL entries from your configuration file so there will be less DNS work to perform. If this happens again, it would be interesting to know where the spamdyke processes are stopped. Tools like strace and gdb might shed some light on what they're doing (or waiting for). -- Sam Clippinger Matthew Kettlewell wrote: >> Hello, >> I'm using SpamDyke 4.0.4 on a Plesk VPS , with Fedora FC4 on it. >> >> All my DNS on my machine went dead ( none of my sites could resolve), >> and the cause was ultimately the dgramrcvbuf was full ( cat >> /proc/user* ) I don't know what it is exactly, but I'd guess a >> recieve buffer of some kind... There were 196 SpamDyke processes, >> like those below. I tried to capture as much info as I could before >> freeing up resources, and losing the facts. >> >> Any thoughts on what happened? >> >> logging was only set to verbose (spamdyke.conf file below), so I >> didn't have anything in the logs to speak of. Is this a known thing, >> or do I have a conflict somewhere? >> >> Thanks >> >> Matt >> >> >> ------------------------- >> This is from ps axo user,pid,ppid,%cpu, >> %mem,vsz,rss,tty,stat,start_time, time, cmd | egrep spamdyke >> >> root 1360 1 0.0 0.0 4132 1332 ? Ss Sep14 >> 00:00:00 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 1429 1 0.0 0.0 4124 1344 ? Ss Sep12 >> 00:00:00 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 1442 1 0.0 0.0 4120 1336 ? Ss Sep12 >> 00:00:00 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 1756 1 0.0 0.0 4128 1336 ? Ss Sep13 >> 00:00:00 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 1790 1 0.0 0.0 4132 1340 ? Ss Sep15 >> 00:00:00 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 3150 1 0.0 0.0 4124 1328 ? Ss Sep09 >> 00:00:01 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 3222 1 0.0 0.0 4120 1324 ? Ss Sep08 >> 00:00:01 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 3316 1 0.0 0.0 4132 1332 ? Ss Sep07 >> 00:00:01 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> root 3322 1 0.0 0.0 4120 1336 ? Ss Sep08 >> 00:00:01 /var/qmail/bin/spamdyke -f /etc/spamdyke.conf >> /var/qmail/bin/relaylock /var/qmail/bin/qmail-smtpd >> /var/qmail/bin/smtp_auth /var/qmail/bin/true >> /var/qmail/bin/cmd5checkpw /var/qmail/bin/true >> > --- Config File: > log-level=verbose > > local-domains-file=/var/qmail/control/rcpthosts > #idle-timeout-secs=240 > > max-recipients=6 > > #smtp-auth=observe > > #log-target=stderr > log-target=syslog > > # full-log-dir=/var/log/SpamDyke/ > > ip-whitelist-file=/var/qmail/spamdyke/whitelist_ip > greeting-delay-secs=4 > reject-missing-sender-mx > #tls-certificate-file=/var/qmail/control/servercert.pem > #policy-url=http://www.spamhaus.org > ip-whitelist-file=/var/qmail/spamdyke/whitelist_ip > > dns-blacklist-entry=zen.spamhaus.org > dns-blacklist-entry=dnsbl.ahbl.org > dns-blacklist-entry=dnsbl.njabl.org > dns-blacklist-entry=dnsbl.sorbs.net > dns-blacklist-entry=bogons.cymru.com > dns-blacklist-entry=bl.spamcop.net > dns-blacklist-entry=list.dsbl.org > > > graylist-level=always > graylist-dir=/var/qmail/spamdyke/greylist > graylist-min-secs=180 > graylist-max-secs=1814400 > > #sender-blacklist-file=/var/qmail/spamdyke/blacklist_senders > > #smtp-auth-comman-encryption=/var/qmail/bin/smtp_auth > #smtp-auth-command-encryption=/bin/true > #smtp-auth-command-encryption=/var/qmail/bin/cmd5checkpw > #smtp-auth-command-encryption=/bin/true > > > > #sender-whitelist-file=/var/qmail/spamdyke/whitelist_senders > > #recipient-blacklist-file=/var/qmail/spamdyke/blacklist_recipients > > #ip-in-rdns-keyword-blacklist-file=/var/qmail/spamdyke/blacklist_keywords > #ip-blacklist-file=/var/qmail/spamdyke/blacklist_ip > > #rdns-whitelist-file=/var/qmail/spamdyke/whitelist_rdns > > reject-empty-rdns > reject-unresolvable-rdns > > > > Any thought?? > > -- > Matthew Kettlewell > President / CEO > Kettlewell Enterprises, Inc > http://www.Kettlewell.net > > PS. -- Don't forget to register your > Grand Junction area business at > http://www.gjzone.com today! > It's Fast, Free, and keeps Grand Junction local. > > > ------------------------------------------------------------------------ > > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users > _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
