Strange behaviour : sloooww processing (bayes problem?)

[Robert Mena]

Hi everyone,

I replaced my exim+rav setup sunday with a
exim+ms+clamav+sa.  Everything was ok, the load was
higher but the flow of the messages seemed smooth.

Today I've noticed that the exim.in queue grew up to
8000 messages.  In the two previous days it never
exceeded 500.  The out queue was higher yesterday (up
to 10K messages) despite the smoother behaviour so It
does not seem an attack or increased volume of
incoming spam.

After I've switched off the spamassassin (still
mailscanner + clamav) the exim.in queue went from 8K
to 0 in a matter of minutes.

Any ideas ?

My setup
- Linux Fedora Core 1 - kernel 2.4.22-1.2188.nptlsmp
- mailscanner-4.30.3-2
- spamassassin-2.63-1
- exim 4.32
- clamav-0.70

My General Configuration setup looks like this:

Max SpamAssassin Size = 30000
Max Unscanned Bytes Per Scan = 0
Max Unsafe Bytes Per Scan = 50000000
Max Unscanned Messages Per Scan = 0
Max Unsafe Messages Per Scan = 100
Max Normal Queue Size = 5000

My sa-learn dump:
0.000          0          2          0  non-token
data: bayes db version
0.000          0       8856          0  non-token
data: nspam
0.000          0       8072          0  non-token
data: nham
0.000          0     357214          0  non-token
data: ntokens
0.000          0 1000210340          0  non-token
data: oldest atime
0.000          0 1085521354          0  non-token
data: newest atime
0.000          0 1085521390          0  non-token
data: last journal sync atime
0.000          0 1085409209          0  non-token
data: last expiry atime
0.000          0     852711          0  non-token
data: last expire atime delta
0.000          0          0          0  non-token
data: last expire reduction count




__________________________________
Do you Yahoo!?
Friends.  Fun.  Try the all-new Yahoo! Messenger.
http://messenger.yahoo.com/

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html