SA CPU 100% - user threshold .10

S

sde

Verified User
Joined
Sep 11, 2004
Messages
213
Location
Temecula, CA
Does a lower threshold screw up spamd?

Example: I'm sitting here looking at spamd taking up just about 100% of the processor with 3 proccesses launched by a user who has their SA threshold set at ".10"

does it sound like a point value is messing up SA?
 
i changed his setting to 1, then restarted exim. it went away for now but i'm wondering if that was the reason it started.

i'm noticing when spamd pops up while watching the top command, spamd runs as root.

when spamd was pegged a little bit ago, it was running as one of my users.

is that normal?
 
spamd, when run as a daemon, runs as root.

I'm not sure under what conditions it'd run as a user.

Anyone?

Jeff
 
again it is happening:
Code: 
 3748 actron  16   0 52164  46m 2692 R   98  2.3   1065:13 spamd
 6470 actron  15   0 55684  49m 2700 R   95  2.4 879:46.61 spamd
 9795 actron  18   0 54596  48m 2696 R   92  2.4 290:01.61 spamd
 
Hello,

It might be dropping privileges once it starts scanning for a user..

As for why it's doing that, I'm not too sure. Check your /var/log/maillog to see if spamd added any error entries.

Also, check the system quotas for actron .. type:
quota -v actron
to make sure he's not over (in case it's writing a temp file, or something as the user, which would be denied if quotas are full.. just a guess)

John
 
Thank you for the reply John. Maybe this is a related issue but I posted a quota error in another post when I try to disable spam assassin on an account.

I'm trying to check quotas for this user and this is what I get:
Code: 
# quota -v actron
quota: Quota file not found or has wrong format.
This happens for any user I enter.
 
also yes, it looks like spamd is setting the UID in the maillog file.
Code: 
Oct 22 04:06:15 cp spamd[17932]: spamd: setuid to actron succeeded
it does this for all users so i guess it is normal.
 
update:

It was suggested to me to try this: http://www.directadmin.com/forum/sh...12039&perpage=20&highlight=spamd&pagenumber=2 so only valid accounts would be scanned, but this still happens.

It's only with this one user. I have created a script that parses the maillog for SA data and this user gets a tenth of the mail that other users get.

I'm going to try the SA forums. I'll report when I find a resolution.
 
I am having the same problem. I have one user for whom the spamd process creates 80-90% CPU usage. I disabled spamassasin for this user and the problem has gone away. I'm looking in to possible problems with mail spool files. I'm not sure where else to turn for this strange error. Do others have a large number of frozen (spam) messages in their mail queue? I'd be interested in any solutions!
 
mine is fixed.

someone on the SA mailing list suggested that they have seen this when there are 2 conflicting rule sets.

i noticed that i had 312.pre and 310.pre. i moved 310.pre to a backup directory and it's been fine ever since.

it could also be related to the user's threshold setting. my user had his set to ".5"

i bumped it up and told him not to change it. i did a test on my own account to see what .5 would do and a lot more spam got through.

i'm leaning toward the conflicting rule set theory as to what was causing the problem, but i made both changes in a similar time range so i am not sure which fixed it 100%.

by the way, is the user you are having problems with the first user alphabetically in your userlist? i'm just wondering if it was the ruleset thing, if the first user is the one that happens to be affected.
 
sde said:
Does a lower threshold screw up spamd?

Example: I'm sitting here looking at spamd taking up just about 100% of the processor with 3 proccesses launched by a user who has their SA threshold set at ".10"

does it sound like a point value is messing up SA?
Click to expand...

Thats why we refuse to install SPAMD. If your doing spam checking via SURBL, SA and MS serverwide, then there is no need to use SPAMD.

I would never enable spamd if you paid me. Its a big system hog and having it running on anything less than a dual cpu is just wasting system resources. When we ran cpanel spamd did the same thing.

Good luck with Spamd
 
really pucky ?
i use spamd and don't have problems, even i use dnslists, and sa dns checks...
 
You must log in or register to reply here.
Back
Top