Ok here is something I discovered in the last 5 minutes.
I just noticed (Today is Weds) that some of my smtpd recipient settings were lost when I did the 3.1.0 to 3.1.1 upgrade on sat night. Specifically, my whitelist entry was gone and the RBL entries were gone. (what tipped me off was that TLS was not working - I use this
Supporting SPA and TLS for SMTP relaying to fix it).
I added the "!" per the forum instructions above (zmmta.cf) and restarted the MTA using zmmtactl start / stop
I then also added these 4 RBLs via the following zmprov command:
zmprov mcf zimbraMtaRestriction reject_invalid_hostname zimbraMtaRestriction reject_non_fqdn_hostname zimbraMtaRestriction reject_non_fqdn_sender zimbraMtaRestriction "reject_rbl_client dnsbl.njabl.org" zimbraMtaRestriction "reject_rbl_client opm.blitzed.org" zimbraMtaRestriction "reject_rbl_client relays.ordb.org" zimbraMtaRestriction "reject_rbl_client cbl.abuseat.org"
At this point I noticed that the server started to respond very slowly and CPU was upwards of 70% with the amavisd processes at the top of my "top" list.
I added my whitelist to postfix_recipient_restrictions.cf (check_sender_access hash:/opt/zimbra/postfix/conf/whitelist) and tried to restart the mta again (it's now noticably slower).
Since I noticed all this stuff happened around the time I was screwing with the postfix settings I decided to remove the RBL entries using the zmprov again. this time I restarted the mta AND amavisd (zmamavisdctl). My CPU returned to normal low %'s.
So is it normal for the black lists to cause amavisd to spaz?
UPDATE: it seems even after i reverted the RBL settings amavisd was still going crazy. looks like it requed about 4000 defered messages. these were junk messages from servers which we usually ignore. i guess that caused the problem.