Help! high spamd processes since installing qmail-scanner

modom46 · Unread post by **modom46** » Fri Jun 02, 2006 1:04 pm

oops! Sorry about that. I didn't even see that minus sign.

I will be more careful.

modom46 · Unread post by **modom46** » Fri Jun 02, 2006 5:09 pm

Hi,

Can someone please help me with these questions?

1. How do you set the "required hits" for spamassassin now that I don't have psa-spamassassin in plesk anymore?
The email header spam listing says it is "5" but have no idea where it gets that figure.

2. If an email gets marked as spam and it is not spam how do you remove it being marked as spam?

3. Why am I getting these all the time still by "root"?
10370 root 16 0 37752 36M 1928 S 14.6 3.6 2:04 0 spamd child
This is the only thing that is showing as installed in the plesk updater section:
SPAM blocker for QMail daemon
Is this related to the spamd child listing and should it be removed?

Thanks!

jamesyeeoc · Unread post by **jamesyeeoc** » Fri Jun 02, 2006 9:21 pm

Hi M,

1. If you edit the file: /etc/mail/spamassassin/local.cf
You will find the SpamAssassin config options. One of them will be:
required_hits 5
(SA normally defaults to 5)

2. Whitelisting: in the same file, you can add lines such as the following:
whitelist_from someone@domain.com
whitelist_from *@domain.com
whitelist_from *@*.domain.com
(and conversely)
blacklist_from *@domain.com
(etc)

3. The 'spamd' process is the SpamAssassin daemon. On your server it appears to be running as user root. I'm not sure if this is normal for CentOS 3.7 or not. Do you also have spamd processes running as user 'popuser' ? If it's not running under multiple user names, then I would not worry about it.

modom46 · Unread post by **modom46** » Fri Jun 02, 2006 10:10 pm

Thank you so much James!

breun · Unread post by **breun** » Sat Jun 03, 2006 8:24 am

On my qmail-scanner machines spamd processes are running as qmailq, not root. What does /etc/sysconfig/spamassassin look like on your machine? Mine has:

Code: Select all

SPAMDOPTIONS="-d -u qmailq -q -x -c -H /var/qmail "

Which is what the installation of qmail-scanner set. The -u qmailq tells your spamd processes to run as user qmailq.

modom46 · Unread post by **modom46** » Sat Jun 03, 2006 10:14 am

Hi,

/etc/sysconfig/spamassassin look like on your machine?

No such file or directory my machine says.

SPAMDOPTIONS="-d -u qmailq -q -x -c -H /var/qmail "

I get nothing ... just goes to the prompt.

This is a section from top this morning:

467 root 16 0 34248 33M 2204 R 25.7 3.3 0:07 0 spamd child
864 qmailq 22 0 5612 5612 1936 S 9.9 0.5 0:00 0 /usr/bin/perl -T /var/qmail/bin/qmail-scanner-queue.pl
853 qmailq 16 0 24756 24M 464 S 2.7 2.4 0:00 0 clamd
2998 apache 15 0 14032 9928 3704 S 1.1 0.9 0:18 0 /usr/sbin/httpd
1292 named 15 0 10904 10M 832 S 0.7 1.0 31:50 0 /usr/sbin/named -u named -c /etc/named.conf -u named -t /va
812 qmaild 17 0 1016 1016 816 S 0.7 0.0 0:00 0 /var/qmail/bin/qmail-smtpd /var/qmail/bin/smtp_auth /var/qm
818 root 15 0 1160 1160 892 R 0.3 0.1 0:00 0 top -c
871 qmailq 24 0 556 556 476 R 0.3 0.0 0:00 0 /usr/bin/spamc -c

Am on CentOS 3.7 and Plesk 8 with CentOS 3.6 (2.4.21-40.EL) kernel

This is another spamd child but run as qmailq:
467 qmailq 16 0 34332 33M 2172 R 7.8 3.3 0:12 0 spamd child
1380 qmailq 21 0 24756 24M 464 S 0.7 2.4 0:00 0 clamd

So some of these spamd child processes run as root and some as qmailq...I'm lost as to what this means or to do.

breun · Unread post by **breun** » Sun Jun 04, 2006 6:57 am

modom46 wrote:
/etc/sysconfig/spamassassin look like on your machine?
No such file or directory my machine says.

Strange. It's one of the config files in the spamassassin package on my machines:

Code: Select all

# rpm -qc spamassassin
/etc/mail/spamassassin/init.pre
/etc/mail/spamassassin/local.cf
/etc/mail/spamassassin/spamassassin-default.rc
/etc/mail/spamassassin/spamassassin-helper.sh
/etc/mail/spamassassin/spamassassin-spamc.rc
/etc/mail/spamassassin/v310.pre
/etc/rc.d/init.d/spamassassin
/etc/sysconfig/spamassassin

SPAMDOPTIONS="-d -u qmailq -q -x -c -H /var/qmail "
I get nothing ... just goes to the prompt.

It's not a command, it's a list of options that gets passed to the spamd daemon when it's started. But apparently you're missing that file. Maybe you should reinstall spamassassin (check if that gives you /etc/sysconfig/spamassassin), reinstall qmail-scanner (which should set the correct SPAMDOPTIONS in /etc/sysconfig/spamassassin), restart spamassassin and then reconfigure qmail-scanner for good measure.

modom46 · Unread post by **modom46** » Sun Jun 04, 2006 9:46 am

Hi Breun,

Before I do this I wanted to post this:
[root@godslove root]# rpm -qc spamassassin
/etc/rc.d/init.d/spamassassin

I found:
/var/qmail/.spamassassin
/etc/mail/spamassassin/local.cf
/etc/mail/spamassassin/init.pre
/etc/mail/spamassassin/v310.pre
/usr/bin/spamassassin

I don't have the rest like your listing.

Have rulesdujour installed and this is plesk 8 with centos 3.7.

Should I uninstall spamassassin first before reinstalling?

jamesyeeoc · Unread post by **jamesyeeoc** » Sun Jun 04, 2006 4:35 pm

Did you try the following command:

cat /etc/sysconfig/spamassassin

??

It could be due to differences between the 'standard' SA package and the one you currently have installed. If you don't have that file now, you should after you uninstall the current one and install the one from ART's site.

modom46 · Unread post by **modom46** » Sun Jun 04, 2006 10:22 pm

Hi James,

I tried to uninstall spamassass and get this error:
[root@godslove root]# rpm -e spamassassin
error: Failed dependencies:
spamassassin is needed by (installed) qmail-scanner-1.25-9.rhel3.art

Do I uninstall both of these at once?

jamesyeeoc · Unread post by **jamesyeeoc** » Mon Jun 05, 2006 3:39 am

At this point, I would first uninstall qmail-scanner, uninstall spamassassin, then (as Breun posted):

Maybe you should reinstall spamassassin (check if that gives you /etc/sysconfig/spamassassin), reinstall qmail-scanner (which should set the correct SPAMDOPTIONS in /etc/sysconfig/spamassassin), restart spamassassin and then reconfigure qmail-scanner for good measure.

Let us know how it goes...

breun · Unread post by **breun** » Mon Jun 05, 2006 5:01 am

You could use rpm -Uvh --force to reinstall a package. Or use --nodeps to disable the dependecy checks (be very careful with that switch) and then install the package you removed right after that.

modom46 · Unread post by **modom46** » Tue Jun 06, 2006 12:47 am

Hi,

Errors everywhere so am back at the beginning with the same configs as posted earlier.

Resolving dependencies
....Unable to satisfy dependencies
Package spamassassin needs perl(:MODULE_COMPAT_5.8.0), this is not available.

I ran cpan and then Warning: Cannot install MODULE_COMPAT_5.8.0, don't know what it is.
Try the command

i /MODULE_COMPAT_5.8.0/

to find objects with matching identifiers.

cpan> i /MODULE_COMPAT_5.8.0
Strange distribution name [/MODULE_COMPAT_5.8.0]
No objects found of any type for argument /MODULE_COMPAT_5.8.0

---------------------------------------------

I went back to centos and installed spamassassin and then updated with Art's in the psa-atomic channel and then reinstalled qmail scanner.

I have spamd child showing run as qmailq and root where root is higher in resource use most of the time than qmailq like 22.3, 10, 21.3, 13.9, 22.1, etc.....