Here is the situation, I started having problems loging into ssh or ftp, and it would take almost 3-4 minutes before I would get logged in, and in most cases, the connection would time out before getting through.. I did get through and when this happens I notice there are alot of EXIM processes running, like over 20, and cpanellogd or something to that sort. I did try rebooting, now I am not getting e-mail, and the logs are not working.. The load seems to have gone down. I have updated the software via the whm control panel in hopes that will work. I am in the process of a reboot to see if that helps. Any ideas? Or professional help to fix this? I am not up to speed on the cpanel and unix stuff.
You need to find out the true cause of your server high load problem. A spammer might be using your server to deliver spam, or you might be under Sync attack. If you wish to read about the causes of high server load, go to: http://www.servertune.com/kbase/security/server_load.html
Hope this helps!
Update on server load
Hello Andy,
Thank you for your reply. The server load goes up when there are higher than normal exim processes running.. Is there any way to control this? It is affecting the ability to log into the servers SSH or FTP when the processes are high like that.
When I kill the EXIM processes the load goes back to normal..
I am not too advanced in unix and cpanel, but whatever information you can provide would be great. In the mean time I Am going to try to disable the spamassasin and see if that helps a bit.
Jim
Hello Andy,
Thank you for your reply. The server load goes up when there are higher than normal exim processes running.. Is there any way to control this? It is affecting the ability to log into the servers SSH or FTP when the processes are high like that.
When I kill the EXIM processes the load goes back to normal..
I am not too advanced in unix and cpanel, but whatever information you can provide would be great. In the mean time I Am going to try to disable the spamassasin and see if that helps a bit.
Jim
Hi Jim,
To narrow down the search for a script sending out SPAM
Insert this directive in the first box of exim advanced editor:
log_selector = +arguments +subject
When you see exim load is high, scan /var/log/exim_mainlog for /home to see if there's a pattern:
grep /home /var/log/exim_mainlog
Hope this helps!