Joey wrote: > > Hello All, > > > > I am currently running SA 3.2.3 compiled from cpan. > > I have a situation where CPU is just going through the roof on just a > few messages and I really can’t tell what part of SA is the slow down. > > > > I’m not that familiar with all the config stuff, so I’m looking for > some help to figure out this problem, and I can send you any > additional information which may be needed. > > > > Here is a test I ran which shows all the steps SA takes to filter > email (spamassassin -D < sample-spam.txt) : > http://web56.net/reference/spamassassin-test.html > > Here is a list of files in each of my SA folders as well as some of > the config files: http://web56.net/reference/spamassassin-config.html > > > > I noticed a few vXXX.pre files, should I erase the older ones, or > does it execute them all together? > You need them all. Don't delete the old ones. (they all come together with the latest SA) > > I also use RulesDuJour daily to get updated cf files. > >From your debug output:
[18696] dbg: config: read file /etc/mail/spamassassin/blacklist-uri.cf [18696] dbg: config: read file /etc/mail/spamassassin/blacklist.cf Ditch blacklist and blacklist-uri. These two are well known ways to kill spamassassin on all but the absolute most beastly machines money can buy. (i.e.: I wouldn't consider it in even a low volume environment with less than 8 gigs of ram and the fastest processors money can buy. Even then it might not run very well.) They really shouldn't be in RDJ anymore, as these are really only useful as a research tool now days. The blacklist-uri is also 100% replaced by the WS list in surbl.org. The plain blacklist file lists From: addresses, which is interesting, but not very useful in real spam fighting due to the high frequency of forgery (and certainly not worth the absurd hardware requirements needed to run it well).