Spamassassin not checking mail for one account

[rezman]

I have one account on my Cpanel server (we'll call it 'account1') that Spamassassin isn't scanning mail for. I have it enabled and the ".spamassassinenable" file exists within that accounts home directory along with the ".spamassassin" directory. As I watch the maillog file I see spamd running for other accounts.

Aug  2 15:05:24 cpanel2 spamd[2023]: spamd: setuid to account32 succeeded
Aug  2 15:05:24 cpanel2 spamd[2023]: spamd: checking message <20130802120404.aluuvv$k[email protected]> for account32:600

I never see it start a process for 'account1' at all and quite a lot of mail comes into that account. Will Spamd not run if there are over a certain amount of email accounts? There are about 2,700 for this cpanel account.

I've tried enabling & disabling spamassassin many times with no luck.
I've restarted '/scripts/restartsrv_spamd' a few times. nothing.
Below is the output from maillog when I do restart spamd.

Aug  2 14:51:41 cpanel2 spamd[25651]: spamd: server killed by SIGTERM, shutting down
Aug  2 14:51:42 cpanel2 spamd[18482]: logger: removing stderr method
Aug  2 14:51:43 cpanel2 spamd[18493]: zoom: able to use 424/425 'body_0' compiled rules (99.764%)
Aug  2 14:51:43 cpanel2 spamd[18493]: spamd: server started on port 783/tcp (running version 3.3.2)
Aug  2 14:51:43 cpanel2 spamd[18493]: spamd: server pid: 18493
Aug  2 14:51:43 cpanel2 spamd[18493]: spamd: server successfully spawned child process, pid 18553
Aug  2 14:51:43 cpanel2 spamd[18493]: spamd: server successfully spawned child process, pid 18554
Aug  2 14:51:43 cpanel2 spamd[18493]: prefork: child states: IS
Aug  2 14:51:43 cpanel2 spamd[18493]: prefork: child states: II
Aug  2 14:51:44 cpanel2 spamd[18553]: spamd: connection from localhost.localdomain [127.0.0.1] at port 46075

I also want to point out that all mail coming into this account is coming from an external SMTP server we have. It handle SMTP only. All mail for this domain is then passed from this SMTP (via qmail smtproutes) to the Cpanel2 server. I double checked the "Service Configuration > Exim Configuration Manager > Access List". Our external SMTP IP was in the "Trusted SMTP IP addresses" but I removed it and restarted Exim. Didn't do anything.

I do have our external SMTP server on the firewall's (csf) ignore list but that shouldn't have anything to do with spamd. Mail is flowing in just fine for this account.

I'm at a loss as to how to get spamd checking for this single account when it's working for all other accounts on the server.

 

[cPanelMichael]

Hello

You mentioned that all email coming into the account is from a single remote mail server. Have you tried sending email to this account from another email server such as Google or Hotmail to see if the same behavior exists?

Thank you.

 

[rezman]

All mail flows in and out perfectly. It's just like spamassassin or spamd won't execute for any emails coming into this Cpanel account.

Here is a little more detail on the setup.

We had our POP/IMAP server crash last week so I just moved all the email accounts over to a Cpanel account.

We have a 2 server setup.

209.172.xxx.xx1 = SMTP and is set as the domains MX server.
209.172.xxx.xx2 = Cpanel and mailbox storage.

Mail comes into xx1, does some custom pre-processing that I wrote over the years. If the mail account exists and is active then xx1 sends the message on over to the Cpanel server xx2. It use to send it over to our old storage server.

The Cpanel server then does its thing and delivers the message to the inbox. Only thing is, it's not executing spamd to scan the message. Thing is, it was working for about the first 12 hours after I set the account up on Cpanel. I disabled Spamassassin for a short time while inbound mail caught up and slowed down. Spamd was causing a high load. Now when I turn it back on it just won't execute and scan the message.

The Cpanel server had about 150 accounts total on it and it's executing spamd for all of those as message come in.

 

[ThinIce]

Odd. Could you give us an ls -al on both the .spamassassinenable file and the contents of the .spamassassin directory for the account?

 

[rezman]

# ll -a .spamassassin*
-rw-r--r-- 1 tripop tripop    0 Aug  2 14:36 .spamassassinenable

.spamassassin:
total 12K
drwx------  2 tripop tripop 4.0K Aug  2 14:35 .
drwx--x--x 15 tripop tripop 4.0K Aug  5 09:26 ..
-rw-r--r--  1 tripop tripop 1.9K Aug  2 14:44 user_prefs

I've manually deleted them all and re-enabled spammassassin and it recreated everything just fine. I've compared them to other working accounts such as my own personal account and everything seems the same. I've even copied the files from my working account over to this one and changed the file ownership. This is just boggling my mind like no other.

 

[cPanelMichael]

I've manually deleted them all and re-enabled spammassassin and it recreated everything just fine. I've compared them to other working accounts such as my own personal account and everything seems the same. I've even copied the files from my working account over to this one and changed the file ownership. This is just boggling my mind like no other.

Could you open a support ticket so we can take a closer look?

Submit A Ticket

Please post the ticket number here and we can update this thread with the outcome.

Thank you.