exim and mailscanner frequently use 80%+ of CPU?

CaMer0n

Well-Known Member
Nov 8, 2004
57
0
156
Hi,

Some time ago, configservers installed and configured our mail setup with mailscanner etc.
But ever since then (and perhaps even before), we get huge memory usage each day - at least that's what the WHM appears to indicate, or am I reading it incorrectly?

Thanks

Example:
root 2.48 3.18 2.0
Top Process %CPU 106 /usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HaOe1-0006iN-9T 1HaOe1-0006iN-BE 1HaOe1-0006iN-79
Top Process %CPU 101 /usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HaLzb-0003Yr-JO 1HaLzb-0003Yr-Gm 1HaLzb-0003Yr-AK
Top Process %CPU 88.8/usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HaLzb-0003Yr-JO 1HaLzb-0003Yr-Gm 1HaLzb-0003Yr-AK

Example2:
Top Process %CPU 91.0 MailScanner: starting child
Top Process %CPU 73.0 MailScanner: checking with SpamAssassin
Top Process %CPU 53.0 MailScanner: checking with SpamAssassin
 

AndyReed

Well-Known Member
PartnerNOC
May 29, 2004
2,217
4
193
Minneapolis, MN
But ever since then (and perhaps even before), we get huge memory usage each day - at least that's what the WHM appears to indicate, or am I reading it incorrectly?
If you are concerned about the CPU load, you can install ASSP or SpamAssassin instead with good rules to stop/minimize SPAM.
 

docbreed

Well-Known Member
Jul 18, 2005
57
0
156
Ok today I've notice the server load was huge.. and this is whats repeating in my maillog
I've updated MailScanner, ClamAV and Mail::Clamav using chirpy's site http://www.configserver.com/cp/upgrade.html and im still receiving this when my MailScanner.conf is set to Virus Scanners = clamavmodule

Apr 10 21:50:30 server MailScanner[11607]: MailScanner E-Mail Virus Scanner version 4.58.9 starting...
Apr 10 21:50:31 server MailScanner[11607]: Using SpamAssassin results cache
Apr 10 21:50:31 server MailScanner[11607]: Connected to SpamAssassin cache database
Apr 10 21:50:34 server MailScanner[11605]: None of the files matched by the "Monitors For ClamAV Updates" patterns exist!


Now when i switch my MailScanner.conf to Virus Scanners = clamav
I get this and im not sure what ERROR: Unable to open file or directory is.


Apr 10 21:47:11 server MailScanner[9276]: New Batch: Scanning 1 messages, 3875 bytes
Apr 10 21:47:11 server MailScanner[9276]: Spam Checks: Starting
Apr 10 21:47:11 server MailScanner[9276]: Message 1HbSrW-0002tW-S8 from 192.207.27.96 () to glei.info is spam, SpamAssassin (not cached, score=16.975, required 5, BAYES_00 -2.60, FORGED_RCVD_HELO 0.14, FROM_NO_LOWER 0.14, HTML_90_100 0.11, HTML_MESSAGE 0.00, URIBL_AB_SURBL 3.81, URIBL_JP_SURBL 4.09, URIBL_OB_SURBL 3.01, URIBL_SBL 1.64, URIBL_SC_SURBL 4.50, URIBL_WS_SURBL 2.14)
Apr 10 21:47:11 server MailScanner[9276]: Spam Checks: Found 1 spam messages
Apr 10 21:47:11 server MailScanner[9276]: Spam Actions: message 1HbSrW-0002tW-S8 actions are deliver
Apr 10 21:47:11 server MailScanner[9276]: Spam Checks completed at 9297 bytes per second
Apr 10 21:47:11 server MailScanner[9276]: Virus and Content Scanning: Starting
Apr 10 21:47:15 server MailScanner[9276]: ERROR: Unable to open file or directory
Apr 10 21:47:16 server MailScanner[9276]: Virus Scanning completed at 916 bytes per second
Apr 10 21:47:16 server MailScanner[9276]: Uninfected: Delivered 1 messages
Apr 10 21:47:16 server MailScanner[9276]: Virus Processing completed at 317750 bytes per second
Apr 10 21:47:16 server MailScanner[9276]: Batch completed at 830 bytes per second (3875 / 4)
Apr 10 21:47:16 server MailScanner[9276]: Batch (1 message) processed in 4.67 seconds
 

RockNRabbit

Registered
Mar 28, 2007
4
0
151
What type of server do you have?

It is stated right on there site that:

*Remember that adding virus scanning of emails to MailScanner will add load to your server.

If your running a celeron with 512mb of ram and have alot of mail accounts it's going to cause load frequencies like this.

However the issue may need to be escalated as there may be a memory leak.
 

chirpy

Well-Known Member
Verifed Vendor
Jun 15, 2002
13,437
31
473
Go on, have a guess
Upgrade using the MailScanner script, the ClamAV issue (introduced in ClamAV 0.90.*) was fixed in a workaround we put in the latest script (as mentioned on our blog).
 

verdon

Well-Known Member
Nov 1, 2003
919
12
168
Northern Ontario, Canada
cPanel Access Level
Root Administrator
RickG, configservers only give support for 1 week, so if you discover it after that time, you're on your own, unless you want to pay again - but by the hour.
I didn't know that was stated policy. I've found them quite friendly and helpful. I haven't had to get them on the server again, but advice has been there when I needed it.

Upgrade using the MailScanner script, the ClamAV issue (introduced in ClamAV 0.90.*) was fixed in a workaround we put in the latest script (as mentioned on our blog).
The blog has an RSS feed, and you should subscribe to it.

There is also a thread here (sorry can't find the bookmark at the moment) that has some good tips for optimizing your setup.
 

docbreed

Well-Known Member
Jul 18, 2005
57
0
156
Thanks, but I'm already running Mailscanner v2.53.
Anyway, I have just upgraded ClamAV to 0.90.2 - let's see if that helps.

Thanks
Cameron
Hows this working for you... Im setting up a new server right now and about to prepair to use same configs lol..