The service “spamd” appears to be down.

here's my log info

chkservd.log:

Code:

Service Check Started
Loading services .....cpanellogd....cpdavd....cpsrvd....crond....dnsadmin....httpd....imap....ipaliases....lmtp....mailman....mysql....named....nscd....pop....queueprocd....rsyslogd....spamd....sshd..Done
[2016-11-08 20:27:39 +1100] Disk check .... /var/tmp (/var/tmp) [7.37%] ... /tmp (/tmp) [7.37%] ... /boot (/boot) [15.43%] ... / (/) [65.95%] ... {status:eek:k} ... Done
[2016-11-08 20:27:39 +1100] OOM check ....Done
[2016-11-08 20:27:39 +1100] Service check ....sshd [[check command:+][socket connect:N/A]]...spamd [][check command:-][socket connect:N/A][fail count:152]Restarting spamd....
[notify:failed service:spamd]]...rsyslogd [[check command:+][socket connect:N/A]]...queueprocd [[check command:+][socket connect:N/A]]...pop [[check command:+][socket connect:+]]...p0f [[check command:N/A][socket connect:N/A]]...nscd [[check command:+][socket connect:N/A]]...named [[check command:+][socket connect:N/A]]...mysql [[check command:+][socket connect:N/A]]...mailman [[check command:+][socket connect:N/A]]...lmtp [[check command:+][socket connect:+]]...ipaliases [[check command:+][socket connect:N/A]]...imap [[socket_service_auth:1][check command:+][socket connect:+]]...httpd [[check command:N/A][socket connect:+]]...exim [[check command:N/A][socket connect:N/A]]...dnsadmin [[http_service_auth:1][check command:+][socket connect:+]]...crond [[check command:+][socket connect:N/A]]...cpsrvd [[http_service_auth:1][check command:N/A][socket connect:+]]...cpgreylistd [[check command:N/A][socket connect:N/A]]...cpdavd [[http_service_auth:1][check command:+][socket connect:+]]...cpanellogd [[check command:+][socket connect:N/A]]...Done
Service Check Finished

and exim_main

2016-11-08 20:27:41 cwd=/ 3 args: /usr/sbin/sendmail -odb -ti
2016-11-08 20:27:42 1c42gv-000C2v-W3 <= root@host.fake.com U=root P=local S=43048 T="[vs-sub.host.fake.com] FAILED \342\233\224: spamd (43.250.250.200)" for me@email.com.au
2016-11-08 20:27:42 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1c42gv-000C2v-W3
2016-11-08 20:27:45 1c42gv-000C2v-W3 => root@host.fake.com R=lookuphost T=remote_smtp H=aspmx.l.google.com [74.125.204.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1478597263 w5si9261154pgj.87 - gsmtp"
2016-11-08 20:27:45 1c42gv-000C2v-W3 Completed

with some details faked

 

Thanks I found something like this . exim trying to send email to root ?

Code:

2016-11-05 17:07:18 cwd=/var/spool/exim 4 args: /usr/sbin/exim -odi -Mc 1c2u7F-0004rn-VZ
2016-11-05 17:07:20 1c2u7F-0004rn-VZ => env25446 <env25446@vs-envent2044.au.example.com> R=localuser T=dovecot_delivery C="250 2.0.0 <env25446@vs-envent2044.au.example.com> RjKnCBh3HVhySgAAGOffjA Saved"
2016-11-05 17:07:20 1c2u7F-0004rn-VZ Completed
2016-11-06 02:39:02 cwd=/root 9 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root
2016-11-06 02:52:02 1c333e-00031Z-Bi <= root@vs-envent2044.au.example.com U=root P=local S=241689 T="Cron <root@vs-envent2044> /usr/local/cpanel/scripts/upcp --cron" for root
2016-11-06 02:52:02 cwd=/var/spool/exim 4 args: /usr/sbin/exim -odi -Mc 1c333e-00031Z-Bi
2016-11-06 02:52:02 1c333e-00031Z-Bi ** root@vs-envent2044.au.example.com R=localuser_root: root cannot accept local mail deliveries
2016-11-06 02:52:02 cwd=/var/spool/exim 8 args: /usr/sbin/exim -odi -t -oem -oi -f <> -E1c333e-00031Z-Bi
2016-11-06 02:52:03 1c33GE-0003nv-UF <= <> R=1c333e-00031Z-Bi U=mailnull P=local S=2191 T="Mail delivery failed: returning message to sender" for root@vs-envent2044.au.example.com
2016-11-06 02:52:03 cwd=/var/spool/exim 4 args: /usr/sbin/exim -odi -Mc 1c33GE-0003nv-UF
2016-11-06 02:52:03 1c33GE-0003nv-UF ** root@vs-envent2044.au.example.com R=localuser_root: root cannot accept local mail deliveries
2016-11-06 02:52:03 1c33GE-0003nv-UF Frozen (delivery error message)
2016-11-06 02:52:03 1c333e-00031Z-Bi Completed

Does that help?

 

Hi thanks for that.

The ticket id is 7945299

Many thanks!
Michal

 

Turns out I was not running exim which SpamAssasin was trying to use

Just had to turn off SpamAssasin:

thanks to the cpanel support for speedy reply! you guys are awesome!