Spam Filter works and then stops

[Billy]

When I try to start spam filtering alone it will work for a few messages, find some spam, block it, and then it stops working with no log entries. It just doesn't scan any more messages.

When I run anti-virus alone, it appears to work:

Nov 29 20:08:55 mail amavis[2351]: (02351-05) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T195347-02351: <shuhui040@barbary.com> -> <sales@interalab.com> SIZE=12061 Received: from mail.intera$
Nov 29 20:08:55 mail amavis[2351]: (02351-05) Checking: B9ZQlaH90L+n [24.178.196.96] <shuhui040@barbary.com> -> <sales@interalab.com>
. . .
Nov 29 20:08:56 mail amavis[2351]: (02351-05) FWD via SMTP: <shuhui040@barbary.com> -> <sales@interalab.com>, 250 2.6.0 Ok, id=02351-05, from MTA([127.0.0.1]:10025): 250 Ok: queued as F290543E8622
Nov 29 20:08:56 mail amavis[2351]: (02351-05) Passed CLEAN, [24.178.196.96] [24.178.196.96] <shuhui040@barbary.com> -> <sales@interalab.com>, Message-ID: <a10a01c19c70$a1118ec2$87b2667d@barbary.com>,$

HOWEVER, when I start both, both appear to work for a short time, but then when the spam filter stops working (as above) no messages appear to be scanned any more, and no messages are ever delivered from that point on. All messages go into the active queue but never leave. The active queue just keeps growing.

When I turn off spam filtering, the messages start sending from the active queue like they should.

Anyone have any idea why this would happen? Our spam database appears to have about 454,000 records in it. Spam training appears to work fine - we just manually trained on 800 junk messages and all echo looked OK with no errors.

System: Fedora Core 4, P4 1.9 G processor, 750M RAM, 300G HD.

[Billy]

Upgraded to 1G RAM and it solved the problem.

Originally Posted by Billy

When I try to start spam filtering alone it will work for a few messages, find some spam, block it, and then it stops working with no log entries. It just doesn't scan any more messages.

When I run anti-virus alone, it appears to work:

Nov 29 20:08:55 mail amavis[2351]: (02351-05) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20061129T195347-02351: <shuhui040@barbary.com> -> <sales@interalab.com> SIZE=12061 Received: from mail.intera$
Nov 29 20:08:55 mail amavis[2351]: (02351-05) Checking: B9ZQlaH90L+n [24.178.196.96] <shuhui040@barbary.com> -> <sales@interalab.com>
. . .
Nov 29 20:08:56 mail amavis[2351]: (02351-05) FWD via SMTP: <shuhui040@barbary.com> -> <sales@interalab.com>, 250 2.6.0 Ok, id=02351-05, from MTA([127.0.0.1]:10025): 250 Ok: queued as F290543E8622
Nov 29 20:08:56 mail amavis[2351]: (02351-05) Passed CLEAN, [24.178.196.96] [24.178.196.96] <shuhui040@barbary.com> -> <sales@interalab.com>, Message-ID: <a10a01c19c70$a1118ec2$87b2667d@barbary.com>,$

HOWEVER, when I start both, both appear to work for a short time, but then when the spam filter stops working (as above) no messages appear to be scanned any more, and no messages are ever delivered from that point on. All messages go into the active queue but never leave. The active queue just keeps growing.

When I turn off spam filtering, the messages start sending from the active queue like they should.

Anyone have any idea why this would happen? Our spam database appears to have about 454,000 records in it. Spam training appears to work fine - we just manually trained on 800 junk messages and all echo looked OK with no errors.

System: Fedora Core 4, P4 1.9 G processor, 750M RAM, 300G HD.

[marcmac]

Originally Posted by Billy

Upgraded to 1G RAM and it solved the problem.

Make sure you're aggressively trimming the signature files - the default cron entry is for 7 days, but you may want to lower it to 2:

0 1 * * * find /opt/zimbra/dspam/var/dspam/data/z/i/zimbra/zimbra.sig/ -type f -name \*sig -mtime +2 -exec rm {} \; > /dev/null 2>&1