<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 10">
<meta name=Originator content="Microsoft Word 10">
<link rel=File-List href="cid:filelist.xml@01C8FD52.88B57C80">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="time"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place" downloadurl="http://www.5iantlavalamp.com/"/>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:SpellingState>Clean</w:SpellingState>
<w:GrammarState>Clean</w:GrammarState>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:Compatibility>
<w:BreakWrappedTables/>
<w:SnapToGridInCell/>
<w:ApplyBreakingRules/>
<w:WrapTextWithPunct/>
<w:UseAsianBreakRules/>
</w:Compatibility>
<w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
</w:WordDocument>
</xml><![endif]--><!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-parent:"";
margin:0in;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman";
mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;
text-underline:single;}
code
{font-family:"Courier New";
mso-ascii-font-family:"Courier New";
mso-fareast-font-family:"Times New Roman";
mso-hansi-font-family:"Courier New";
mso-bidi-font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
mso-style-noshow:yes;
mso-ansi-font-size:10.0pt;
mso-bidi-font-size:10.0pt;
font-family:Arial;
mso-ascii-font-family:Arial;
mso-hansi-font-family:Arial;
mso-bidi-font-family:Arial;
color:windowtext;}
span.SpellE
{mso-style-name:"";
mso-spl-e:yes;}
span.GramE
{mso-style-name:"";
mso-gram-e:yes;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;
mso-header-margin:.5in;
mso-footer-margin:.5in;
mso-paper-source:0;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 10]>
<style>
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";}
</style>
<![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple style='tab-interval:.5in'>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I have a Dell PowerEdge server 2950 with 2 Dual Core Xeon
processors 3.0GHz with 2GB RAM running RedHat ES 4.<span
style='mso-spacerun:yes'> </span>The MTA is sendmail and I am using the
latest MailScanner version (4.70.7-1).<span style='mso-spacerun:yes'>
</span>The system processes about 2,000 emails per day and about half of it are
spam.<span style='mso-spacerun:yes'> </span>See the following:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#---------------<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none'><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'>MailScanner
Status:<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none'><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><span
style='mso-tab-count:1'> </span>1920 messages
Scanned by MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none'><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><span
style='mso-tab-count:1'> </span>73657132 Total
Bytes<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none'><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><span
style='mso-tab-count:1'> </span>1122 Spam
messages detected by MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal style='mso-layout-grid-align:none'><font size=2
face="Courier New"><span style='font-size:10.0pt;font-family:"Courier New"'><span
style='mso-tab-count:1'> </span>6 Viruses found
by MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Courier New"><span style='font-size:10.0pt;
font-family:"Courier New"'><span style='mso-tab-count:1'> </span>935
Messages delivered by MailScanner</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#---------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The mail delivery is very slow.<span
style='mso-spacerun:yes'> </span>Some time it takes 2 hrs before it gets
delivered.<span style='mso-spacerun:yes'> </span>I tried the tips under <a
href="http://wiki.mailscanner.info/doku.php?id=documentation:tweaking:some_things_to_try_if_your_incoming_queue_is_running_slow">http://wiki.mailscanner.info/doku.php?id=documentation:tweaking:some_things_to_try_if_your_incoming_queue_is_running_slow</a>
but they did not help.<span style='mso-spacerun:yes'> </span>The mail
keeps accumulating under /var/spool/mqueue.in while all the MailScanner
processors are running at 100% CPU.<span style='mso-spacerun:yes'>
</span>Then all the sudden (after 1-2 hours) it starts delivering the emails
and the /var/spool/mqueue.in files go down to 0.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I monitored the system today; the system stopped delivering
emails between </span></font><st1:time Hour="9" Minute="12"><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'>9:12AM</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> till </span></font><st1:time
Hour="11" Minute="35"><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>11:35AM</span></font></st1:time><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>.<span
style='mso-spacerun:yes'> </span>During that time, top showed something
like this:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#----------------<o:p></o:p></span></font></p>
<p class=MsoNormal><span class=GramE><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>top</span></font></span><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> - </span></font><st1:time
Hour="10" Minute="46"><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>10:46:26</span></font></st1:time><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'> up 3 days,<span
style='mso-spacerun:yes'> </span></span></font><st1:time Hour="19"
Minute="42"><font size=2 face=Arial><span style='font-size:10.0pt;font-family:
Arial'>7:42</span></font></st1:time><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>,<span
style='mso-spacerun:yes'> </span>1 user,<span
style='mso-spacerun:yes'> </span>load average: 5.81, 6.09, 5.48<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Tasks: 233 total,<span style='mso-spacerun:yes'>
</span>5 running, 226 sleeping,<span style='mso-spacerun:yes'>
</span>0 stopped,<span style='mso-spacerun:yes'> </span>2 zombie<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Cpu(s): 59.0% us<span class=GramE>,<span
style='mso-spacerun:yes'> </span>1.2</span>% sy,<span
style='mso-spacerun:yes'> </span>0.0% ni, 39.5% id,<span
style='mso-spacerun:yes'> </span>0.2% <span class=SpellE>wa</span>,<span
style='mso-spacerun:yes'> </span>0.0% hi,<span
style='mso-spacerun:yes'> </span>0.0% <span class=SpellE>si</span><o:p></o:p></span></font></p>
<p class=MsoNormal><span class=SpellE><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Mem</span></font></span><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>:<span
style='mso-spacerun:yes'> </span>2074600k total<span class=GramE>,<span
style='mso-spacerun:yes'> </span>1735692k</span> used,<span
style='mso-spacerun:yes'> </span>338908k free,<span
style='mso-spacerun:yes'> </span>22524k buffers<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Swap:<span style='mso-spacerun:yes'> </span>2097144k
total,<span style='mso-spacerun:yes'> </span>356516k used<span
class=GramE>,<span style='mso-spacerun:yes'> </span>1740628k</span>
free,<span style='mso-spacerun:yes'> </span>532576k cached<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><span style='mso-spacerun:yes'> </span>PID USER<span
style='mso-spacerun:yes'> </span><span
class=GramE>PR<span style='mso-spacerun:yes'> </span>NI</span><span
style='mso-spacerun:yes'> </span>VIRT<span
style='mso-spacerun:yes'> </span>RES<span style='mso-spacerun:yes'>
</span>SHR S %CPU %MEM<span style='mso-spacerun:yes'>
</span>TIME+<span style='mso-spacerun:yes'> </span>COMMAND<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><span style='mso-spacerun:yes'> </span>2752 root<span
style='mso-spacerun:yes'> </span>25<span
style='mso-spacerun:yes'> </span>0 <span class=GramE>85572<span
style='mso-spacerun:yes'> </span>75m</span> 2964 R<span
style='mso-spacerun:yes'> </span>100<span style='mso-spacerun:yes'>
</span>3.7<span style='mso-spacerun:yes'> </span>35:54.85 MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><span style='mso-spacerun:yes'> </span>2880 root<span
style='mso-spacerun:yes'> </span>25<span
style='mso-spacerun:yes'> </span>0 <span class=GramE>85572<span
style='mso-spacerun:yes'> </span>75m</span> 2956 R<span
style='mso-spacerun:yes'> </span>100<span style='mso-spacerun:yes'>
</span>3.7<span style='mso-spacerun:yes'> </span>35:50.35 MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><span style='mso-spacerun:yes'> </span>3024 root<span
style='mso-spacerun:yes'> </span>25<span
style='mso-spacerun:yes'> </span>0 <span class=GramE>85572<span
style='mso-spacerun:yes'> </span>75m</span> 2956 R<span
style='mso-spacerun:yes'> </span>100<span style='mso-spacerun:yes'>
</span>3.7<span style='mso-spacerun:yes'> </span>35:41.62 MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><span style='mso-spacerun:yes'> </span>2949 root<span
style='mso-spacerun:yes'> </span>25<span
style='mso-spacerun:yes'> </span>0 <span class=GramE>85572<span
style='mso-spacerun:yes'> </span>75m</span> 2956 R<span
style='mso-spacerun:yes'> </span>100<span style='mso-spacerun:yes'>
</span>3.7<span style='mso-spacerun:yes'> </span>35:47.07 MailScanner<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>11393 apache<span
style='mso-spacerun:yes'> </span>15<span
style='mso-spacerun:yes'> </span>0 26360 9736 3648 S<span
style='mso-spacerun:yes'> </span><span class=GramE>5<span
style='mso-spacerun:yes'> </span>0.5</span><span
style='mso-spacerun:yes'> </span>0:57.14 <span class=SpellE>httpd</span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>11394 apache<span
style='mso-spacerun:yes'> </span>15<span
style='mso-spacerun:yes'> </span>0 26576 9936 3616 S<span
style='mso-spacerun:yes'> </span><span class=GramE>5<span
style='mso-spacerun:yes'> </span>0.5</span><span
style='mso-spacerun:yes'> </span>0:58.83 <span class=SpellE>httpd</span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>26598 root<span
style='mso-spacerun:yes'> </span>16<span
style='mso-spacerun:yes'> </span><span class=GramE>0<span
style='mso-spacerun:yes'> </span>4760</span> 2568 1648 S<span
style='mso-spacerun:yes'> </span>1<span
style='mso-spacerun:yes'> </span>0.1<span
style='mso-spacerun:yes'> </span>0:00.20 <span class=SpellE>ssh</span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#----------------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><span class=GramE><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>and</span></font></span><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> the
/var/spool/mqueue.in continued to accumulate files till it reached 489
messages, then within 5 minutes it delivered all the messages!<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>This cycles continues all day long, where the emails are
withheld for 1 to 2 hours and then the get delivered in one big burst.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Here are snippets of the log for that period with “</span></font><code><font
size=2 face="Courier New"><span style='font-size:10.0pt'>Log Speed =
yes”:<o:p></o:p></span></font></code></p>
<p class=MsoNormal><font size=3 face=Arial><span style='font-size:12.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><span class=SpellE><span class=GramE><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'>grep</span></font></span></span><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> ":
Batch" /<span class=SpellE>var/log/maillog</span><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#-----------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Aug 13 </span></font><st1:time Hour="9" Minute="12"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>09:12:16</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> samba <span
class=GramE>MailScanner[</span>5852]: Batch completed at 1844 bytes per second
(39583 / 21)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Aug 13 </span></font><st1:time Hour="9" Minute="12"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>09:12:16</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> samba <span
class=GramE>MailScanner[</span>5852]: Batch (2 messages) processed in 21.46
seconds<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Aug 13 </span></font><st1:time Hour="9" Minute="12"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>09:12:42</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> samba <span
class=GramE>MailScanner[</span>6013]: Batch completed at 3752 bytes per second
(9167 / 2)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>…<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Aug 13 </span></font><st1:time Hour="11" Minute="28"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>11:28:55</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> samba <span
class=GramE>MailScanner[</span>2949]: Batch (10 messages) processed in 24.54
seconds<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Aug 13 </span></font><st1:time Hour="11" Minute="28"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>11:28:55</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> samba <span
class=GramE>MailScanner[</span>3024]: Batch completed at 657 bytes per second
(3825 / 5)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Aug 13 </span></font><st1:time Hour="11" Minute="28"><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>11:28:55</span></font></st1:time><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> samba <span
class=GramE>MailScanner[</span>3024]: Batch (1 message) processed in 5.82
seconds<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>#-----------<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I would appreciate any clues on resolving this issue.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;mso-no-proof:yes'>Best regards,</span></font><span
style='mso-no-proof:yes'><o:p></o:p></span></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;mso-no-proof:yes'><br>
</span></font><st1:place><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;mso-no-proof:yes'>Nasser</span></font></st1:place><o:p></o:p></p>
</div>
</body>
</html>