> Someone here suggested that it's a memory problem. Where? I didn't see any reply to your post.
Most of my machines have 1gig RAM. That should be enough for the 5 SA-children I thought... > The rate that it's occuring for you might support that if you handle a > lot of users. Yes, but my setup is not user-based. Just global configs. > only got one domain with around 20 users and about 2000-10000 spams a > day. Uiii, that is a LOT for one domain! Are you accepting ALL usernames for your domain or just the existing ones? > The SIGTERM hasn't happenned here since Monday, and I think that was the > last day in a series of days when we had a large wave of spam come in > (including a short but intense backscatter attack Same here, but with SA 3.0 I had no SIGTERMs at all. The whole problem started with the upgrade to 3.1.7. Here are the last two log lines _before_ the SIGTERM, maybe that helps to find my problem? btw, I just installed "libsys-hostname-long-perl" to get rid of the "Can't locate Sys/Hostname/Long.pm" error. gold.akte.de:~#grep -B 2 "server killed by SIGTERM" /var/log/spamd.log Fri Apr 13 10:00:02 2007 [6751] info: spamd: result: Y 5 - BAYES_99,DATE_IN_FUTURE_03_06,FORGED_RCVD_HELO scantime=3.2,size=1029,user=root,uid=0,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.socket,mid=<[EMAIL PROTECTED]>,bayes=0.999999999999888,autolearn=no Fri Apr 13 10:00:02 2007 [20395] info: prefork: child states: II Fri Apr 13 10:00:09 2007 [20395] info: spamd: server killed by SIGTERM, shutting down -- Fri Apr 13 11:11:03 2007 [1830] info: spamd: processing message <[EMAIL PROTECTED]> for root:0 Fri Apr 13 11:11:03 2007 [1830] error: Can't locate Sys/Hostname/Long.pm in @INC (@INC contains: lib ../lib /usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl) at /usr/share/perl5/Mail/SPF/Query.pm line 328, <GEN934> line 40. Fri Apr 13 11:11:09 2007 [14822] info: spamd: server killed by SIGTERM, shutting down -- Fri Apr 13 12:22:01 2007 [3826] info: spamd: got connection over /var/run/spamd.socket Fri Apr 13 12:22:01 2007 [3826] info: spamd: processing message <[EMAIL PROTECTED]> for root:0 Fri Apr 13 12:22:14 2007 [10643] info: spamd: server killed by SIGTERM, shutting down -- Fri Apr 13 13:33:05 2007 [367] info: spamd: result: Y 31 - BAYES_99,EXTRA_MPART_TYPE,HELO_DYNAMIC_IPADDR,HTML_40_50,HTML_IMAGE_ONLY_24,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,INLINE_IMAGE,MY_CID_AND_ARIAL2,MY_CID_AND_STYLE,MY_CID_ARIAL_STYLE,PART_CID_STOCK,TVD_FW_GRAPHIC_ID1,TW_PM,TW_WM,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_WS_SURBL scantime=8.2,size=11271,user=root,uid=0,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.socket,mid=<[EMAIL PROTECTED]>,bayes=1,autolearn=spam Fri Apr 13 13:33:05 2007 [5784] info: prefork: child states: IB Fri Apr 13 13:33:08 2007 [5784] info: spamd: server killed by SIGTERM, shutting down -- Fri Apr 13 14:44:09 2007 [19326] info: spamd: processing message <[EMAIL PROTECTED]> for root:0 Fri Apr 13 14:44:09 2007 [19326] error: Can't locate Sys/Hostname/Long.pm in @INC (@INC contains: lib ../lib /usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl) at /usr/share/perl5/Mail/SPF/Query.pm line 328, <GEN1257> line 39. Fri Apr 13 14:44:09 2007 [2197] info: spamd: server killed by SIGTERM, shutting down -- Fri Apr 13 15:55:03 2007 [21280] info: spamd: processing message <[EMAIL PROTECTED]> for root:0 Fri Apr 13 15:55:03 2007 [21280] error: Can't locate Sys/Hostname/Long.pm in @INC (@INC contains: lib ../lib /usr/share/perl5 /etc/perl /usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl) at /usr/share/perl5/Mail/SPF/Query.pm line 328, <GEN1425> line 194. Fri Apr 13 15:55:09 2007 [31206] info: spamd: server killed by SIGTERM, shutting down -- Fri Apr 13 17:00:08 2007 [22160] info: spamd: got connection over /var/run/spamd.socket Fri Apr 13 17:00:08 2007 [22160] info: spamd: processing message (unknown) for root:0 Fri Apr 13 17:00:13 2007 [29550] info: spamd: server killed by SIGTERM, shutting down Thanks, Andy. -- The difference between the right word and nearly the right word is the same as the difference between lightning and a lightning bug.
