On 23.09.09 13:06, Jose Luis Marin Perez wrote: > A few moments ago I noticed that SA was not assigned any score for SPAM > emails, reviewing the log I see this: > > @400000004aba627c21bee88c [25630] info: spamd: got connection over > /tmp/spamd.sock > @400000004aba627c21dbc344 [10362] info: prefork: child states: > BBBBBBBBBBBBBBBBBBBB > @400000004aba627c21de4f9c [10362] info: prefork: server reached > --max-children setting, consider raising it > @400000004aba627c21f6a9fc [29083] info: spamd: got connection over > /tmp/spamd.sock > @400000004aba627c22137ce4 [10362] info: prefork: child states: > BBBBBBBBBBBBBBBBBBBB > @400000004aba627c23420234 [25630] info: spamd: processing message > <20090923123800.35362610...@mail6.shermanstravel.com> for > cama...@qnet.com.pe:89 > @400000004aba627c235e293c [10362] info: prefork: server reached > --max-children setting, consider raising it > @400000004aba627c26639554 [29083] info: spamd: processing message > <20090923174010.29472.qm...@mkt1.lan.com> for cbr...@qnet.com.pe:89 > @400000004aba62832e01e694 [10362] info: prefork: child states: > BBBBBBBBBBBBBBBBBBBB > @400000004aba62832e01ee64 [10362] info: prefork: server reached > --max-children setting, consider raising it > tail: `/var/log/qmail/spamd/current' has been replaced; following end of new > file > > cpu > > Cpu(s): 89.2% us, 9.8% sy, 0.0% ni, 0.0% id, 0.0% wa, 1.0% hi, 0.0% si > > memory > > total used free shared buffers cached > Mem: 501 319 181 0 22 78 > -/+ buffers/cache: 218 282 > Swap: 1027 38 988 > > Load > 13:02:27 up 35 days, 21:49, 4 users, load average: 21.76, 21.17, 17.37 > > > Was solved by restarting SA > > This is due to lack of server resources?
- the high load is because of high number of spamd children running. - the missing scores of some emails are because you need more of spamd children running, connections are refused so any spamc client just passes messages as they are. Well, you can/should throttle incoming e-mail when you notice this. Or, get a faster machine. Or, try comment out all SARE rules (especially those URI*) if that helps (they are recource-hungry). Note that many plugins help much more than some rules, especially network: - razor2 (net) - pyzor (net) - DCC (net) - URIDNSBL (net) - rbl checks (net) - SPF (net, in fact) - DKIM (net) - TextCat (net) - ImageInfo - RelayCountry (net) I advise you check them before searching for other rules. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. WinError #98652: Operation completed successfully.
