I've been running 1.20ST for quite awhile now, and about a month ago, my mail servers (3 different ones) have been at 10.0 - 50.0 load averages. spamassassin taking 60-200+ seconds to process a message, had to limit the threads to 5, as it was crashing the servers from running out of RAM 1GB ram, 1GB swap.
turning off spamassassin for 5 minutes, and letting the queue settle... server was humming along at 0.3 load average... turned it back on and looked great 1.0 - 2.5 load average... spamassassin processing at 2-3 seconds... for about a hour... then it started progressivly getting worse.. and the mail rate started increasing.
watching the load with cat qmail-queue.log | grep -c "reject" and cat qmail-queue.log | grep -c "Total" averaging well over 100-200 messages a minute and rejecting on average 89% of those messages.
the mini-debug and based on watching ps -aux | grep spamc noticed that some users were constantly getting mail... processing time was ok for spamassassin like 4-6 seconds or more per message.
did a cat qmail-queue.log | grep "<a-user>@<domain.com>" and BAM! same message 1500 times in 2 hours, checked some other users... same thing... 5000 of 5200 messages in the 2 hours period we the same messages every 6 seconds being sent and rejected
Turns out from what I can tell.... some mail servers (poorly written, or intentionally DOSing) keep sending the messages about 2 seconds after they get the rejection... and they don't stop 1500 attempts for the same messsage in 2 hours...
set sa-reject to 0
Server is now humming along for the past 3-4 hours at load average: 0.50
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
