We have increased the 20 as well as samples: / usr / bin / spamd-v-u vpopmail-m 20-x-q-s stderr-r / var / run / spamd / spamd.pid \ 172.16.10.9-A-i 172.16.10.0/24 2> & 1 | \ / usr / local / bin / setuidgid qmaill \ / usr / local / bin / multilog t! spamdappend / var / log / qmail / spamd & echo "spamd started" ;;
In simscan have configured as follows . / configure - enable-clamav = y - enable-clamdscan = / usr / local / bin / clamdscan - enable-dropmsg = y - enable-custom-smtp-reject = n - enable-per-domain = y - enable-attach = y - enable-spam = y - enable-ripmime = / usr / local / bin / ripmime - enable-received = y - enable - spam-hits = 5.0 - enable-spamc = / usr / bin / spamc - enable-spamc-args =- s 200000-t 60-d 172.16.10.9,172.16.10.14,172.16.10.15 - ena ble-spamc-user = y - enable-regex = and - with-pcre-include = / usr / local / include On the other hand I'd like to show the configuration loca.cf sA ok_locales all skip_rbl_checks 1 #Con esto evalua cada mensaje, se requiere un 5.0 para marcarlo como spam required_hits 3 #Que realice reporte de mensaje report_safe 0 #Sobreescriba el subjetc rewrite_header Subject ***SPAM*** ######################################################################## #Usas pyzor si lo tienes, pero lo bajas desde cpan use_pyzor 1 use_razor2 1 dcc_path /usr/local/bin/dccproc dcc_home /var/dcc dcc_body_max 999999 dcc_timeout 10 dcc_fuz1_max 999999 dcc_fuz2_max 999999 #Inicias las funcionalidades del spamassassin use_auto_whitelist 1 use_bayes 1 use_bayes_rules 1 bayes_auto_learn 1 bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_learn_threshold_spam 12 ###################################################################### user_scores_dsn DBI:mysql:spamassassin:localhost user_scores_sql_username spamuser user_scores_sql_password spampass user_scores_sql_custom_query SELECT preference, value FROM _TABLE_ WHERE username = '$GLOBAL' OR username = CONCAT('%',_DO MAIN_) OR username = _USERNAME_ ORDER BY username ASC auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList user_awl_dsn DBI:mysql:spamassassin:localhost user_awl_sql_username spamuser user_awl_sql_password spampass user_awl_sql_table awl bayes_store_module Mail::SpamAssassin::BayesStore::MySQL bayes_sql_dsn DBI:mysql:spamassassin:localhost bayes_sql_username spamuser bayes_sql_password spampass ##################################################################### # Modified default scores score BAYES_99 5.5 # 5.4 score RAZOR2_CHECK 2.5 # 0.899 score RAZOR2_CF_RANGE_51_100 4.5 # 1.552 score RAZOR2_CF_RANGE_11_50 1.5 # 0.559 score DCC_CHECK 3.0 # 1.806 score PYZOR_CHECK 3.0 # 0.322 > Subject: Re: FW: SpamAssassin error Interrupted system call > From: guent...@rudersport.de > To: users@spamassassin.apache.org > Date: Thu, 4 Jun 2009 00:29:06 +0200 > > On Wed, 2009-06-03 at 22:00 +0000, Luis campo wrote: > > this is an example of var / log / qmail / spamd > > > > 2009-06-03 12:00:16.471682500 [775] info: spamd: result: Y 15 - > > DCC_CHECK,DIGEST_MULTIPLE,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_DATE,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RDNS_NONE,URIBL_BLACK > > > > scantime=8.3,size=5837,user=fri...@ec-red.com,uid=89,required_score=3.0,rhost=172.16.10.9,raddr=172.16.10.9,rport=47584,mid=<789509335664072.ftlwktkqdskf...@[85.94.122.108]>,autolearn=spam > > Something is working, somehow... > > > 2009-06-03 12:00:16.531889500 [19168] info: prefork: child states: > > BBBBBBBBBB > > 2009-06-03 12:00:16.531949500 [19168] info: prefork: server reached > > --max-children setting, consider raising it > > There's your problem. > > You got 10 spamd children, all BUSY. That's what the 'B's mean. > > Since you got 1 GByte of RAM, you could try increasing the number of > children. *Slowly*. If you exceed what your system's RAM can handle, > you'll hit swap and thrashing will kill the server. > > Hmm, given this occurs after a while of operation only, that might be > exactly it. Swap thrashing? What does the command 'free' return? > > > Another possibility is, that you are scanning all messages regardless, > including really *large* messages. You shouldn't scan messages larger > than, say, 0.5 MByte. > > The scantime of 8-10s is somewhat reasonable, probably caused by the > issue we're trying to nail. With normal operation and the hardware > capable of running the children, it should be considerably lower, like a > few seconds average, with some occasional spikes. That's too long for a > normal average. > > > Do you have any third-party rule-sets installed? Using sa-update, which > channels? Any custom cf files or something? Anything you added? > > > -- > char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; > main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: > (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} > _________________________________________________________________ Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us