MailScanner being killed and restarted until system hangs

[sebastian ruchti]

Hi there,

after I've been running MailScanner successfully since beginning of August,
strange things are happening since last Saturday.
Since then, MailScanner has started being killed from time to time (out of
memory) and thus begun starting inumerable processes making the system going
out of memory, the load climed dramatically (avg load > 16) and several
processes (i.e. apache, exim, shh, ...) exited and the system hung (log
excerpts see below).

Well this happend twice the last few days.
Has somebody a experienced similar beaviour or a glue what that might come
from?

I'm running MailScanner (4.32.5), with SpamAssassin (2.64), ClamAv-Module /
Bitdefender on a Debian box with exim (exact config below).

Any hints appreciated!
Thanks
.sebastian
.............
MailScanner --version
.............
This is Perl version 5.008004
This is MailScanner version 4.32.5
Module versions are:
1.00    AnyDBM_File
1.12    Archive::Zip
1.02    Carp
1.119   Convert::BinHex
1.00    DirHandle
1.05    Fcntl
2.72    File::Basename
2.07    File::Copy
2.01    FileHandle
1.06    File::Path
0.14    File::Temp
1.27    HTML::Entities
3.36    HTML::Parser
2.28    HTML::TokeParser
1.21    IO
1.10    IO::File
1.123   IO::Pipe
5.403   MIME::Decoder
5.403   MIME::Decoder::UU
5.403   MIME::Head
5.406   MIME::Parser
5.411   MIME::Tools
0.09    Net::CIDR
1.08    POSIX
1.77    Socket
0.05    Sys::Syslog
1.02    Time::localtime
Optional module versions are:
2.63    Mail::SpamAssassin
missing Net::LDAP
missing SAVI
0.11    Mail::ClamAV


.............
syslog excerpts:
.............
Sep 28 17:21:59 lyra MailScanner[29549]: New Batch: Scanning 1 messages,
1286 bytes
Sep 28 17:22:22 lyra MailScanner[29549]: Spam Checks: Found 1 spam messages
Sep 28 17:22:22 lyra kernel: Out of Memory: Killed process 15648
(MailScanner).
Sep 28 17:22:24 lyra MailScanner[29549]: Virus and Content Scanning:
Starting
Sep 28 17:22:40 lyra MailScanner[29549]: Uninfected: Delivered 1 messages
Sep 28 17:22:40 lyra MailScanner[29549]: MailScanner child dying of old age
Sep 28 17:22:45 lyra MailScanner[15662]: MailScanner E-Mail Virus Scanner
version 4.32.5 starting...
Sep 28 17:23:01 lyra /USR/SBIN/CRON[15664]: (mail) CMD (  if [ -x
/usr/lib/exim/exim3 -a -f /etc/exim/exim.conf ]; then /usr/lib/exim/exim3 -q
; fi)
Sep 28 17:24:17 lyra MailScanner[15662]: Using locktype = posix
Sep 28 17:24:17 lyra MailScanner[15662]: Creating hardcoded struct_flock
subroutine for linux (Linux-type)
Sep 28 17:30:27 lyra MailScanner[15662]: New Batch: Scanning 1 messages,
5144 bytes
Sep 28 17:30:47 lyra kernel: Out of Memory: Killed process 16321
(MailScanner).
...
Sep 28 21:28:31 lyra kernel: Out of Memory: Killed process 26384
(MailScanner).
Sep 28 21:28:37 lyra MailScanner[26385]: MailScanner E-Mail Virus Scanner
version 4.32.5 starting...
Sep 28 21:30:48 lyra kernel: Out of Memory: Killed process 26385
(MailScanner).
Sep 28 21:30:49 lyra mail: Process did not exit cleanly, returned 0 with
signal 9
Sep 28 21:30:50 lyra MailScanner[26405]: MailScanner E-Mail Virus Scanner
version 4.32.5 starting...
Sep 28 21:33:03 lyra kernel: Out of Memory: Killed process 26405
(MailScanner).
Sep 28 21:33:04 lyra mail: Process did not exit cleanly, returned 0 with
signal 9
Sep 28 21:33:04 lyra MailScanner[26406]: MailScanner E-Mail Virus Scanner
version 4.32.5 starting...
Sep 28 21:35:00 lyra kernel: Out of Memory: Killed process 26406
(MailScanner).
Sep 28 21:35:00 lyra mail: Process did not exit cleanly, returned 0 with
signal 9
Sep 28 21:35:02 lyra MailScanner[26407]: MailScanner E-Mail Virus Scanner
version 4.32.5 starting...
Sep 28 21:36:59 lyra kernel: Out of Memory: Killed process 26407
(MailScanner).
Sep 28 21:37:00 lyra mail: Process did not exit cleanly, returned 0 with
signal 9
Sep 28 21:37:02 lyra MailScanner[26428]: MailScanner E-Mail Virus Scanner
version 4.32.5 starting...

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).