> Now, (it seems, cross fingers) magically the
> /var/mail/userxxx file is being kept small by
> something. The rates of spamassassin marked headers
> was getting 8000+ msgs a day through to me. We shall
> see what the new rates are, but it looks a _lot_
> better.
I suspect that you had managed to get a huge AWL or Bayes database, and SA
was trying to do an expire run on almost every mail processed. This would
exceed a time limit somewhere in the processing chain, and SA would get
killed. Then procmail or whatever is calling SA would pass the message
through unmarked. The next mail -- same thing happens.
If you can manually run SA and can access the Bayes DB, then you can in all
probability manually do an expire run at midnight with a cron job or the
like. Then you could turn off the option to do automatic expirations and
just handle them manually. YOu seem to be getting enough mail that this
might be worthwhile anyway.
Loren
