spamd failed - Need help stopping this email coming to me

[Andre Montaut]

For the last 2 days I seem to be getting this email every hour or so. Any idea why this is the case and what i can do to resolve it?

spamd failed @ Thu Feb 17 11:38:01 2011. A restart was attempted automagically.
Service Check Method: [check command]

Cmd Service Check Raw Output: Spamd is not running Raw Output: Subject: Test spam mail (GTUBE)
Message-ID: <[email protected]>
Date: Wed, 23 Jul 2003 23:30:00 +0200
From: Sender <[email protected]>
To: Recipient <[email protected]>
Precedence: junk
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

This is the GTUBE, the
Generic
Test for
Unsolicited
Bulk
Email

If your spam filter supports it, the GTUBE provides a test by which you can verify that the filter is installed correctly and is detecting incoming spam. You can send yourself a test mail containing the following string of characters (in upper case and with no white spaces and line breaks):

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

You should send this test mail from an account outside of your network.

 

[vincentg]

I am seeing same message on two servers - both are Centos - no such message on a Fedora server

 

[ruiz]

Install the cpanel plugin "spamdconf" via your WHM, reload WHM and click "Setup Spamd Startup Configuration" on your menu.

Then, you'll need to try higher values for "Maximum Children" and "Maximum Connections Perl Child". I have mine setup as:
Maximum Children:8
Allowed IPs: 127.0.0.1
Maximum Connections Perl Child:4

Please note that you'll have a higher cpu and ram usage after you change those options.

 

[plague]

Hi

This is happening in a fewer servers I have, after the upgrade to 11.32. The error tends to appear on monday (don't know why).
I think the problem is with the "restartsrv" script because if I try to restart the service with "/scripts/restartsrv spamd" spamd will fail with this on logs:

May  2 09:19:23 tucano spamc[25399]: connect to spamd on 127.0.0.1 failed, retrying (#1 of 3): Connection refused
May  2 09:19:24 tucano spamc[25399]: connect to spamd on 127.0.0.1 failed, retrying (#2 of 3): Connection refused
May  2 09:19:25 tucano spamc[25399]: connect to spamd on 127.0.0.1 failed, retrying (#3 of 3): Connection refused
May  2 09:19:26 tucano spamc[25399]: connection attempt to spamd aborted after 3 retries

(spamc ?)

If I restart it using "/scripts/restartsrv_spamd" it comes up and running again, without any errors. I guess WHM automatically restarts use the first command line, is it possible?
I'm about to submit a ticket for this, but if anyone could help...

 

[GuntherR]

Had the same problem this morning after an XML-LibXML cPanel update (Successfully installed XML-LibXML-1.97 (upgraded from 1.96)).
Installed the spamdconf and set "Allowed IPs: 127.0.0.1" and all was working fine again.

The first Checkd email I received contained the following:

Cmd Service Check Raw Output: Spamd is not running
Raw Output:


Startup Log: Apr 5 02:46:00.192 [26095] warn: Argument "" isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/NetSet.pm line 122.
Apr 5 02:46:00.192 [26095] warn: oops! unparseable IPv6 address for 127/8: 319197872 at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/NetSet.pm line 128.
Apr 5 02:46:00.193 [26095] warn: oops! unparseable IPv6 address for 127/8: 319198368 at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/NetSet.pm line 128.

Thanks for the posting!