Spamassassin 100% CPU

[zarrelli]

Hi,

after a server crash I decided to install everyting from roots, so I installed a ISPConfig on a brand new Ubuntu Hardy server, following the "perfect server" setup.

Short after creating some new users, I lost the control of the server: 100% CPU, 100% memory, 100% swap. The most of the problem was due to the process "spamassassin" which was eating all the resources.

After rebooting the server, gained access to it and quickly disabled Postfix. Doing that, the load stepped down from the former 20 to 1,7 and I could then configure ISPConfig not to use SpamAssassin.

Well, not pleasant. I prefere to have all the emails, for all the hosted domains, filtered.

So, what can I do? And, how can I do to have filtering back at a fair load?

Thanks.

[falko]

Take a look here: http://www.howtoforge.com/forums/sho...pamd+ispconfig

[zarrelli]

No way,

I did

apt-get install spamassassin

changed /root/ispconfig/isp/conf/spamassassin.rc.master

:0fw
* < 256000
| /usr/bin/spamc
/root/ispconfig/isp/conf/spamassassin.rc.master

Then

touch /home/admispconfig/ispconfig/.run


But...

syslog:May 18 12:12:29 homeland spamd[23012]: Use of uninitialized value in numeric ge (>=) at /usr/lib/perl/5.8/DB_File.pm line 276.
syslog:May 18 12:12:29 homeland spamd[23012]: Use of uninitialized value in numeric gt (>) at /usr/lib/perl/5.8/DB_File.pm line 280.
syslog:May 18 12:12:29 homeland spamd[23012]: Deep recursion on subroutine "DB_File::AUTOLOAD" at /usr/lib/perl/5.8/DB_File.pm line 235.
root@homeland:/var/log# ls /root/isp

I'm using an ubuntu server hardy

[zarrelli]

Look here what i found on a spam email header:

X-Virus-Status: Failed
X-Virus-Report: /home/admispconfig/ispconfig/tools/clamav/bin/clamdscan error 2
X-Virus-Checker-Version: clamassassin 1.2.4 with clamdscan / WARNING: Can't parse the configuration file..


What is wrong? Mail, obviously, don't get tagged as spam

[falko]

Please copy /root/ispconfig/isp/conf/spamassassin.rc.master to /root/ispconfig/isp/conf/customized_templates/spamassassin.rc.master. Afterwards, you must update all your users in ISPConfig so that the new template will be used to rewrite each user's spamassassin.rc file.

[zarrelli]

I did as you told, but the email stopped to fall in the user mailbox.

So, I tried to delete two users in that domain and recreate them:

I can't. It says the already exists, even if the do not appear in the user manager.

I did a grep
on

/etc/passwd, /home/admispconfig/ispconfig/users, /etc/postfix/virtusertabl

and they only appear in /etc/passwd.

Then I checked isp_isp_user table and I found them there, there is also their directory unders "users".

The recycle bin keeps telling me

"The system is currently updating the configuration files."

I modified some other users, rebooted ispconfig, rebooted the servers, but nothing. Any ideas?

Thanks

[zarrelli]

Well,

problem solved. After a while ISPConfig wrote the new configuration.

I enabled spamassassin and then...well...still 100% of resources eaten, even using clamscand, following the instructions found following the link you pointed me.

The processor of the server is quite fair:

rocessor : 0
vendor_id : AuthenticAMD
cpu family : 15
model : 55
model name : AMD Athlon(tm) 64 Processor 3700+
stepping : 2
cpu MHz : 2199.743
cache size : 1024 KB

and 2 GB of ram.

Any suggestions?

Thanks

[falko]

Is it really ClamAV and SpamAssassin that are eating up your resources? You can run

top

to find out.

[zarrelli]

Mem: 2061840k total, 2047520k used, 14320k free, 152k buffers
Swap: 2104504k total, 2104504k used, 0k free, 3620k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
10144 root 20 0 4000m 1.9g 360 R 9.1 94.8 0:19.81 spamd


Well, it seems it's spamd. It is started as I launch /etc/init.d/spamassassin.

It goes even higher with cpu utilization, but it's difficult to snapshot cause the server freezes after a while.

[falko]

Are there any errors related to spamassassin in your logs?
What's the output of

spamassassin --lint

?