On 11/30/2013 08:27 PM, Gino Semseo wrote:
Hello:I am the hoster ;) This is the launch command: usr/local/cpanel/3rdparty/perl/514/bin/spamd -d --allowed-ips=127.0.0.1 --max-conn-per-child=200 --pidfile=/var/run/spamd.pid --max-children=4 This is the spamassassin.conf loadplugin Mail::SpamAssassin::Plugin::ResourceLimits resource_limit_mem 268435456 ########################################################################################################## allow_user_rules 0 ########################################################################################################## include /etc/mail/spamassassin/whitelistfile ########################################################################################################## required_score 5.5 ########################################################################################################## # DCC use_dcc 1 dcc_home /var/dcc dcc_path /usr/bin/dccproc dcc_timeout 10 dcc_body_max 30 dcc_fuz1_max 30 dcc_fuz2_max 40 score DCC_CHECK 60 ########################################################################################################## # RAZOR use_razor2 1 razor_config /var/razor/razor-agent.conf score RAZOR2_CHECK 60 ########################################################################################################## bayes_path /etc/mail/spamassassin/bayes/bayes bayes_file_mode 0777 use_bayes 1 bayes_auto_learn 1 bayes_auto_expire 0 bayes_use_hapaxes 1 bayes_journal_max_size 100000 bayes_expiry_max_db_size 3600000 bayes_learn_to_journal 1 bayes_auto_learn_threshold_spam 30 bayes_auto_learn_threshold_nonspam 1 #required_hits 3.5 #######################################################################################################use_auto_whitelist 0 #auto_whitelist_factor 0.5 #auto_whitelist_path /etc/mail/spamassassin/awl/auto-whitelist #auto_whitelist_file_mode 0777 ########################################################################################################## skip_rbl_checks 1 ########################################################################################################## ########################################################################################################## score BAYES_00 0 score BAYES_05 0 score BAYES_20 1.6 score BAYES_40 2.0 score BAYES_50 2.3 score BAYES_60 2.5 score BAYES_80 4 score BAYES_95 6 score BAYES_99 7 score FROM_EXCESS_BASE64 2 score SUBJ_ALL_CAPS 0.6 score RP_MATCHES_RCVD 0 score HTML_IMAGE_ONLY_08 1.4 score URIBL_GREY 2.5 score URIBL_BLACK 4.5 score URIBL_JP_SURBL 3.5 score URIBL_DBL_SPAM 4 score DIET_1 0.8 score HTML_SHORT_LINK_IMG_2 1 score DEAR_SOMETHING 1 score MISSING_SUBJECT 1 score FSL_HELO_BARE_IP_2 1 score HTML_FONT_SIZE_HUGE 2 score FREEMAIL_ENVFROM_END_DIGIT 0 score FSL_CTYPE_WIN1251 4 score FORGED_OUTLOOK_TAGS 2 score FREEMAIL_FORGED_REPLYTO 2 score FREEMAIL_REPLYTO 3 score FORGED_MUA_OUTLOOK 3.5 score DEAR_SOMETHING 2.5 score DRUGS_ERECTILE 2 score DRUGS_ERECTILE_OBFU 2 score DRUG_ED_CAPS 2.5 score KAM_VIAGRA1 2.5 score KAM_VIAGRA5 2.5 score KAM_VIAGRA6 2.5 ################################################################################################################################################################################################################# # DESHABILITAR ANALISIS DE ESTOS HEADERS AL FILTRO BAYESIANO ########################################################################################################## bayes_ignore_header X-Bogosity bayes_ignore_header X-Spam-Flag bayes_ignore_header X-Spam-Status bayes_ignore_header X-Spam-Report ########################################################################################################## ########################################################################################################## Spamd is using suexec to execute spamassassin.... most of the time is fine, some others the proccess die do not know why, at different points... It is not a question of Exim, just forwarding emails to spamd.... not above 200Kb..... is just a question of spamd (with -D) logging: Nov 29 15:52:28 hyperserver spamd[34416]: prefork: child closed connection Nov 29 15:52:28 hyperserver spamd[34416]: prefork: child states: BIIIII Nov 29 15:52:28 hyperserver spamd[34416]: prefork: child 34429: just exited Nov 29 15:52:28 hyperserver spamd[34416]: prefork: child 34429: entering state 4 Nov 29 15:52:28 hyperserver spamd[34416]: spamd: handled cleanup of child pid [34429] due to SIGCHLD: exit 1 at different points... I thought first on memory available... but ulimit -a for root/users shows no memory problem: sudo -u semseoes -H bash -c "ulimit -a" core file size (blocks, -c) 400000 data seg size (kbytes, -d) 400000 scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 255627 max locked memory (kbytes, -l) 64 max memory size (kbytes, -m) unlimited open files (-n) 16000 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) 8192 cpu time (seconds, -t) unlimited max user processes (-u) 110 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited This is just the same for all users... and above kernel at sysctl.conf: kernel.sysrq=0 fs.inotify.max_user_watches=65536 fs.inotify.max_queued_events=65536 kernel.core_uses_pid=1 kernel.pid_max=65536 fs.file-max=5000000 kernel.shmmax=68719476736 kernel.shmall=4294967296 #kernel.shmmax=1073741824 #kernel.shmall=3774873 kernel.sem=250 256000 32 1024 kernel.msgmax=65535 kernel.msgmnb=65535 vm.swappiness=1 vm.vfs_cache_pressure=50 The server has 32Gb of RAM and is 0.x LOAD most of the time! free total used free shared buffers cached Mem: 32737940 31507400 1230540 0 407284 9139196 -/+ buffers/cache: 21960920 10777020 Swap: 16777208 0 16777208 And the problem goes on.... The bayes: ll -h total 72M -rw-rw-rw- 1 cpanel cpanel 83K nov 30 20:19 bayes_journal -rwxrwxrwx 1 root root 10M nov 30 20:06 bayes_seen -rwxrwxrwx 1 root root 77M nov 30 20:06 bayes_toks The whitelist: # wc -l whitelistfile 127049 whitelistfile # du -hs whitelistfile 4,7M whitelistfile The big problem: # grep "due to SIGCHLD" maillog | wc -l 14227 2013-11-30 13:07:18 1VmjKP-0001O5-6O spam acl condition: cannot parse spamd output 2013-11-30 13:22:48 1VmjZP-0002s9-MV spam acl condition: cannot parse spamd output 2013-11-30 13:26:49 1VmjdI-0003EA-QV spam acl condition: cannot parse spamd output 2013-11-30 13:44:48 1Vmjue-0004y2-Tt spam acl condition: cannot parse spamd output 2013-11-30 14:08:48 1VmkHt-0007QV-5T spam acl condition: cannot parse spamd output 2013-11-30 15:08:39 1VmlDq-000Cpv-Ou spam acl condition: cannot parse spamd output 2013-11-30 15:10:01 1VmlF9-000Cvn-GX spam acl condition: cannot parse spamd output 2013-11-30 16:27:47 1VmmSP-0003CQ-Ee spam acl condition: cannot parse spamd output 2013-11-30 16:54:31 1VmmsI-0005Z2-G4 spam acl condition: cannot parse spamd output 2013-11-30 18:30:27 1VmoN3-000EU6-Pp spam acl condition: cannot parse spamd output 2013-11-30 18:44:40 1Vmoat-000Fl0-Sk spam acl condition: cannot parse spamd output 2013-11-30 20:05:03 1Vmpqe-0005bN-PY spam acl condition: cannot parse spamd output Other example: the last fail at exim_mainlog Nov 30 20:05:03 hyperserver spamd[20097]: spamd: connection from localhost [127.0.0.1] at port 36073 Nov 30 20:05:03 hyperserver spamd[20097]: spamd: setuid to cuerposp succeeded Nov 30 20:05:03 hyperserver spamd[20092]: prefork: child states: BI Nov 30 20:05:03 hyperserver spamd[20092]: spamd: handled cleanup of child pid [20097] due to SIGCHLD: exit 1 Nov 30 20:05:03 hyperserver spamd[20092]: spamd: server successfully spawned child process, pid 21738 Nov 30 20:05:03 hyperserver spamd[20092]: prefork: child states: II Look what happens to child spamassassin proccess 20097....... ;) Now I have -D disabled at spamd, but I can activate... Could someone help me?? I can debug or show you the data you ask for without problems...
Please keep list mail on the list. This is not supplied by SA - I suppose it's some Cpanel special loadplugin Mail::SpamAssassin::Plugin::ResourceLimits No idea why one may need that. You run spamd with --max-children=4 On a busy box, I'd increase that to 30 and add --min-spare=5
