Exim: Spamd generating high cpu load

RoRoo

RoRoo

Verified User
Joined
Dec 16, 2004
Messages
112
Hi,

Since recently our server is behaving strangely with e-mail

Clients are unable to send or receive e-mail and when I check the load of the server the service: spamd is generating high loads.

Versions:
Processor Name Intel(R) Pentium(R) 4 CPU 2.80GHz
Vendor ID GenuineIntel
Processor Speed (MHz) 2800.182
Total Memory 514416 kB
Free Memory 4976 kB
Total Swap Memory 2048248 kB
Free Swap Memory 1991160 kB
System Uptime 23 Days, 21 Hours and 11 Minutes
Apache 1.3.34 Running
DirectAdmin 1.25.0 Running
Exim 4.54 Running
MySQL 4.0.17 Running
Named 9.2.2 Running
ProFTPd 1.2.9 Running
sshd Running
vm-Pop3d 1.1.7e Running

Spamassassin version: 3.04

In what files can I check what is causing this behavior?
 
*bump*

ne1???
problem still exists :(

it seems to be caused by one user since when I do the ps -aux |grep spamd I get:
Code: 
root     22304  0.0  0.3 26740 1968 ?        S    09:11   0:00 /usr/bin/spamd -d -c -m 5
username   22307 28.6  1.2 33308 6256 ?        R    09:11 116:48 spamd child
root     22308  0.1  3.9 38804 20452 ?       S    09:11   0:24 spamd child
root     22309  0.1  4.1 41828 21532 ?       S    09:11   0:26 spamd child
username   22310 53.8  0.8 34220 4508 ?        R    09:11 219:44 spamd child
root     22311  0.1  4.1 40352 21540 ?       S    09:11   0:24 spamd child
root     18513  0.0  0.1  4132  584 pts/0    S    16:00   0:00 grep spamd
 
Hi RoRoo... did you ever get any assistance with this or get it resolved? If you did, what was the problem? I am having similar issues on my server.

Thanks
 
If you haven't already, then upgrade to the latest SpamBlocker and modify it to use "combined.njabl.org". This will filter out most spams before they get to Exim and SpamAssassin.
 
Thanks! Do you mean the latest exim.conf file modified to use SpamBlocker? Does it come "out of the box" ready to go? I know that I can add "combined.njabl.org" to the RBL list... thanks for that tip.
 
Check the first few lines of your /etc/exim.conf. If it contains "SpamBlocker.exim.conf.2.0-release", then you have the latest version. Otherwise see this thread about upgrading it. A new version is due out soon, so be sure to check back.

When I upgraded from v1.0 to v2.0, I saw a noticible drop in system load from SpamAssassin and Exim. Oh, one last thing. I disabled SpamAssassin's RBL check (skip_rbl_checks 1) because the SpamBlocker exim.conf already does it. If you receive a lot of spam to [email protected], then read this thread.

P.S. Naturally you should be running the latest SpamAssassin (3.1.6 or 3.1.7).
 
If you want anyone accidentally blocked by SpamBlocker to be able to get unblocked you need to edit the messages exim uses to refuse blocked email.

You need to point to a page you create on your server.

Search for example.com in exim.conf to see what I mean.

Jeff
 
You must log in or register to reply here.
Back
Top