[BlueOnyx:15347] Re: Spamd High Cpu

[Ken Marcus]

On 5/5/2014 2:50 AM, Stefano Cecconello wrote:
> Hi,
>
> On a Blueonyx 5106R of ours, we've been experiencing an high load due 
> to spamd processes.
>
> Cpu(s): 87.3%us, 10.8%sy,  0.0%ni,  0.0%id,  0.0%wa,  1.0%hi, 1.0%si,  
> 0.0%st
> Mem:   2075016k total,  2020968k used,    54048k free,    38204k buffers
> Swap:  4194296k total,   265380k used,  3928916k free,   489044k cached
>
>   PID USER      PR  NI  VIRT  RES  SHR S %CPU %MEM    TIME+ COMMAND
>  7618 ban-ptur  23   0 70636  59m 2868 S 42.2  2.9   0:38.91 spamd
>  7620 col-info  21   0 70832  59m 2884 R 40.2  2.9   0:36.06 spamd
>
> The graphs on the SolarSpeed GUI -> AV-Spam v5 -> Statistics aren't 
> working.
>
> It is possible to know what mailbox \ domain are getting hammered with 
> spam messages ?
>
> Thanks in advance
>
> Best Regards
> -- 
>
> **Stefano Cecconello
>
>
>

Stefano

Make sure that you have at least one blacklist for the server. This will 
reduce the spamd load by blocking those messages before they get to it.

If you have a blacklist like zen.spamhaus.org  enabled in the GUI, it 
still might not be active in the actual sendmail.cf. I think Yum updates 
tend to inactivate the blacklist.

You can check that using a command like
cat /etc/mail/sendmail.cf | grep zen

If it's not there, just re-add it. In the admin area / GUI  delete the 
blacklist and then re-add.
Then check it again using   cat /etc/mail/sendmail.cf | grep zen
Probably you still will not see it there.

So, to make sure the new  blacklist is added to the sendmail.cf go to 
the Advanced tab and change a value like max recipients, then save from 
that screen.
Then check it again using   cat /etc/mail/sendmail.cf | grep zen


Ken Marcus





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20140505/783f2213/attachment.html>