<html>
<body>
There have been some DDoS attacks against anti-spam service today as the
result of the spread of Mimail-C.<br>
See this for a bit more info:<br>
<a href="http://www.theregister.co.uk/content/56/33721.html" eudora="autourl">http://www.theregister.co.uk/content/56/33721.html</a><br>
But I get the feeling that razor has been having its own problems today
too.<br><br>
<br>
At 17:38 03/11/2003, you wrote:<br>
<blockquote type=cite class=cite cite><font face="arial" size=2>Hi
All,</font><br>
<br>
<font face="arial" size=2>I've been having problems with one of my e-mail
gateways today - the load average has been spiking at 1.90 with no
unusual increase in mail volume and MailScanner's been showing in 'top'
using 99.9% CPU.</font><br>
<br>
<font face="arial" size=2>After a bit of investigating (strace -p,
debug=yes etc. etc.) - I realised that SpamAssassin was getting timeouts
when talking to Razor2/DCC/Pyzor (my timeout's are set to 10 seconds for
each with SpamAssassin timeout set to 60 seconds in
MailScanner.conf)</font><br>
<br>
<font face="arial" size=2>Also while in Debug=yes/SpamAssassin Debug=yes
mode I had an occurrence of 'Process did not exit cleanly, returned 0
with signal 11' just after SpamAssassin ran it's bayes tests (I think it
was about to start a DCC/Razor2 or Pyzor check) and upon grepping
/var/log/messages - I found 64 occurrences of the 'signal 11' in the logs
since it's last log roll.</font><br>
<br>
<font face="arial" size=2>I've since disabled the DCC/Pyzor/Razor2 checks
while I work out what's going on - I also haven't had any sig11's in the
log since I've done this and my load average is down to 0.04 (however it
is after 5.30pm here so a lot of my users have gone home, so it won't get
much stressing until tommorow)</font><br>
<br>
<font face="arial" size=2>Anyone else experience anything similar?? - I
haven't made any changes to this box for ages.</font><br>
<br>
<font face="arial" size=2>I'm running MailScanner 4.22-4, SA 2.60, DCC
1.1.36, Pyzor 0.4.0, Razor-Agents-2.22 and MailWatch CVS on RH9 running
on a Compaq Proliant DL360 G1 933Mhz PIII with 512Mb RAM.</font><br>
<br>
<font face="arial" size=2>Kind regards,</font><br>
<font face="arial" size=2>Steve.</font></blockquote></body>
<br>
<div>-- </div>
<div>Julian Field</div>
<div><a href="http://www.mailscanner.info/" EUDORA=AUTOURL>www.MailScanner.info</a></div>
<div>Professional Support Services at
<a href="http://www.mailscanner.biz/" EUDORA=AUTOURL>www.MailScanner.biz</a></div>
<div>MailScanner thanks transtec Computers for their support</div>
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
</html>