dcc/razor2/pyzor timeouts anyone?

[Julian Field]

There have been some DDoS attacks against anti-spam service today as the
result of the spread of Mimail-C.
See this for a bit more info:
http://www.theregister.co.uk/content/56/33721.html
But I get the feeling that razor has been having its own problems today too.


At 17:38 03/11/2003, you wrote:
>Hi All,
>
>I've been having problems with one of my e-mail gateways today - the load
>average has been spiking at 1.90 with no unusual increase in mail volume
>and MailScanner's been showing in 'top' using 99.9% CPU.
>
>After a bit of investigating (strace -p, debug=yes etc. etc.) - I realised
>that SpamAssassin was getting timeouts when talking to Razor2/DCC/Pyzor
>(my timeout's are set to 10 seconds for each with SpamAssassin timeout set
>to 60 seconds in MailScanner.conf)
>
>Also while in Debug=yes/SpamAssassin Debug=yes mode I had an occurrence of
>'Process did not exit cleanly, returned 0 with signal 11' just after
>SpamAssassin ran it's bayes tests (I think it was about to start a
>DCC/Razor2 or Pyzor check) and upon grepping /var/log/messages - I found
>64 occurrences of the 'signal 11' in the logs since it's last log roll.
>
>I've since disabled the DCC/Pyzor/Razor2 checks while I work out what's
>going on - I also haven't had any sig11's in the log since I've done this
>and my load average is down to 0.04 (however it is after 5.30pm here so a
>lot of my users have gone home, so it won't get much stressing until tommorow)
>
>Anyone else experience anything similar?? - I haven't made any changes to
>this box for ages.
>
>I'm running MailScanner 4.22-4, SA 2.60, DCC 1.1.36, Pyzor 0.4.0,
>Razor-Agents-2.22 and MailWatch CVS on RH9 running on a Compaq Proliant
>DL360 G1 933Mhz PIII with 512Mb RAM.
>
>Kind regards,
>Steve.

--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC  7222 11F6 5947 1415 B654
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20031103/387568f6/attachment.html