Skip to main content

Another spamd failure question

Karl_Thomas
This is the error email I receive. Failing every couple of days, Is there a fix. Should I be worried? Any help much appreciated --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Server Primary IP Address Service Name spamd Service Status failed ? Notification The service "spamd" appears to be down. Service Check Method The system"s command to check or to restart this service failed. Number of Restart Attempts 1 Service Check Raw Output (XID uue5yy) The "spamd" service is down. The subprocess "/usr/local/cpanel/scripts/restartsrv_spamd" reported error number 69 when it ended. Startup Log Nov 02 06:36:46 domain.com.au spamd[372]: spamd: clean message (-2.3/5.0) for Account.com:1011 in 4.1 seconds, 39396 bytes. Nov 02 06:36:46 domain.com.au spamd[372]: spamd: result: . -2 - BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FROM_EXCESS_BASE64,HTML_MESSAGE,MIME_HTML_ONLY,SPF_PASS,TVD_PH_SUBJ_META,T_SCC_BODY_TEXT_LINE scantime=4.1,size=39396,user=Account,uid=1011,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=41738,mid=,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no Nov 02 06:40:03 domain.com.au spamd[372]: spamd: connection from localhost [127.0.0.1]:41762 Nov 02 06:40:03 domain.com.au spamd[372]: spamd: setuid to Account succeeded Nov 02 06:40:03 domain.com.au spamd[372]: spamd: checking message for Account:1005 Nov 02 06:40:05 domain.com.au spamd[372]: spamd: identified spam (14.1/5.0) for Account:1005 in 2.4 seconds, 9324 bytes. Nov 02 06:40:05 domain.com.au spamd[372]: spamd: result: Y 14 - BAYES_99,BAYES_999,DKIM_ADSP_CUSTOM_MED,FORGED_GMAIL_RCVD,FORGED_SPF_HELO,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,FREEMAIL_REPLYTO_END_DIGIT,HTML_MESSAGE,KAM_DMARC_NONE,KAM_DMARC_STATUS,MIME_HTML_ONLY,NML_ADSP_CUSTOM_MED,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_PASS,SPF_SOFTFAIL,SPOOFED_FREEMAIL,SPOOF_GMAIL_MID,T_SCC_BODY_TEXT_LINE scantime=2.4,size=9324,user=cavemannet,uid=1005,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=41762,mid=,bayes=1.000000,autolearn=no autolearn_force=no,shortcircuit=no Nov 02 06:40:31 domain.com.au systemd[1]: spamd.service: main process exited, code=killed, status=9/KILL Nov 02 06:40:31 domain.com.au systemd[1]: Unit spamd.service entered failed state. Nov 02 06:40:31 domain.com.au systemd[1]: spamd.service failed. Memory Information Used 882 MB Available 3 GB Installed 3.86 GB Load Information 20.33 5.88 2.08 Uptime 29 days, 20 hours, 38 minutes, and 44 seconds IOStat Information avg-cpu: %user %nice %system %iowait %steal %idle 6.89 0.03 1.93 0.15 0.00 91.00 Device: tps kB_read/s kB_wrtn/s kB_read kB_wrtn vda 22.51 253.70 193.06 654514141 498072180 Top Processes PID Owner CPU % Memory % Command 18646 root 13.42 0.06 spamd-dormant: waiting for connections [5,6] --max-children=3 --max-conn-per-child=50 --allowed-ips=127.0.0.1,::1 --pidfile=/var/run/spamd.pid --listen=5,6 18552 mysql 2.87 1.92 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid 18691 root 0.25 0.20 cPhulkd - processor - http socket 14940 cpanelconnecttrack 0.19 0.07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0 32120 root 0.07 0.38 /opt/imunify360/venv/bin/python3 -m imav.run

Comments

3 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! A load of 20 isn't ideal - what CPU do you have in that server, or if it is a VPS, how many cores do you get? Is the load always higher when you get these notifications?
    0
  • Karl_Thomas
    Its a VPS. 2 CPU's, 4GB Memory? Any tips.
    0
  • cPRex Jurassic Moderator
    Thanks for the server details. I would say that system has very high load during the time that spamd is being killed, which is likely happening as an attempt to keep the server stable. I would monitor the server during the time these notifications typically happen to see if you can find what is causing that high load on the machine, as that is likely the root of the issue.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post