OKay, Copy of of a spam is located at https://pastebin.com/gdCB9V6U
It processed okay with spamassassin -t -D
Here is my spamd options
SPAMDOPTIONS="-d -u nobody -q -x -i
-A192.168.2.3,192.168.1.3,192.168.1.2,127.0.0.1
--max-children=20 --max-conn-per-child=5 --timeout-child=150
I did have the child timeout @ 300, and cut it in half hoping it would help..
On 04/27/2017 04:43 PM, John Hardin wrote:
On Thu, 27 Apr 2017, Billy Huddleston wrote:
Hey Guys,
I just recently started having issues with spamd getting hung on emails. I've been seeing lots of emails with cont...@qq.com and other contact@... domains. I looked at a few of
these messages and they all had this stuff in them..
<style>
>
\\\>><<///<<??###??!!!??~~~???$$$???%%%****////>>><<<$#*))))*&^%$#@!~((((|||//////////2b85//|??????????////////*****}}>>****>><<&&&&<<}}{{{))))####(((({{$$$$>%%%%>>~~~!!!!~~~~<*&^<<)))*&^%$#!~?><(((
It's possible some REs are tripping over garbage like that. Can you post one
such (with complete headers please) to pastebin or something similar so we can
take a look and test it?
Now, In addition to this, I was running SA v3.3.2. Yes, I know.. old version..
so first thing I did was upgrade. Now running v3.4.1 Still having the issue.
This instance of SA is running on a rather older version of CentOS and has don't nothing but be a SA server all it's life. The Load average for the machine has been going
through the roof too.. I've seen anywhere from 14 to 19 at times that this is happening. Our mail volume hasn't increased nor has the spam/ham ratio. So, I'm not sure what is
going on. Any help would be appreciated.
Very likely a runaway RE.
