On Wed, 2008-03-12 at 09:31 +0700, FC Mario Patty wrote:
> Guys,
>
> I updated my spamassassin to SpamAssassin version 3.2.4 that running
> on Perl version 5.8.5 in a hope that spamd wouldn't kill my CPU again.
> Once in less-or-more an hour user cannot send email and have to wait
> until the 99.9% process finished. When I ran 'top' I got:
>
> PID USER PR NI VIRT RES SHR S %CPU %MEM
> TIME+ COMMAND
> 1905 spamd 25 0 41984 35m 2828 R 99.9
> 1.8 4:24.58 spamd
>
> And when I tail-ed my /var/log/maillog I got:
>
> Mar 12 09:05:10 mail spamd[1905]: spamd: identified spam (7.8/4.0) for
> simscan:604 in 265.8 seconds, 2820 bytes.
> Mar 12 09:05:10 mail spamd[1905]: spamd: result: Y 7 -
> AWL,BAYES_80,FH_HELO_EQ_D_D_D_D,HELO_DYNAMIC_IPADD R,
> HTML_IMAGE_ONLY_24,HTML_MESSAGE,MIME_HTML_ONLY,MIS SING_DATE,RCVD_IN_SORBS_DUL,RDNS_NONE,
> SPF_SOFTFAIL,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_S URBL,URIBL_OB_SURBL,URIBL_SBL,
> URIBL_SC_SURBL,URIBL_WS_SURBL
> scantime=265.8,size=2820,user=simscan,uid=604,requ ired_score=4.0,rhost=mail.my-domain.com,raddr=127.0.0.1,
> rport=41698,mid=<20080312075757.17432.qmail@ppp91-77-189-172.pppoe.mtu-net.ru>,bayes=0.918852,autolearn=spam
>
>
> FYI, I have this in my /etc/mail/spamassassin/local.cf:
>
> required_score 4.0
> use_pyzor 0
> use_razor2 0
>
> Is there anything that I shouldn't do with the filter? And if there
> was, how should I do that? Thank you in advance for your help.
>
> Regards,
>
>

The first thing to do any time you're troubleshooting SpamAssassin is
run something through it with the -D flag set, and read the output, *all
of it*, very carefully. There's a crapload of information in there and
it's easy to get overwhelmed by the sheer volume, but if you scroll
through it, the answer is very often right there in front of you.

For what it's worth, it smells very much like a networking or DNS issue
to me.

Good luck!

--
Rubin Bennett
rbTechnologies, LLC
rbennett@thatitguy.com
http://thatitguy.com
(802)223-4448

"Those who would give up essential liberty to purchase a little
temporary safety deserve neither liberty nor safety."
-Ben Franklin, Historical Review of Pennsylvania, 1759