Server high load - clamscan

Discussion in 'General' started by blocker, Aug 22, 2008.

  1. blocker

    blocker Member

    Hi Forumers,

    i have a strange problem on one of my servers running ispconfig 2.2.24. It gets very loaded, as i look at "top" i can see a number of spamassassin and clamscan processes, they are running under the rights of existing users from various domains.
    I managed to stop postfix and drop the queue, but the load does not go away :eek: , "top" said that there are still a number of clamscan's running with full power, mail.log was empty at that moment...

    Any ideas?

    Thanks
     
    blocker, Aug 22, 2008
    #1
  2. blocker

    blocker Member

    Server was under heavy SPAM attack!

    the basic ISPconfig mailsystem setup does not offer checking "at the entrance", so every piece of SPAM gets processed by the spamfilter - that has caused the very high load of my server.
    I have made some extra postfix setting and installed some extra software. Now i use policyd-weight, postgrey, policid-weight and i am happy to see that a GREAT amount of SPAM is being rejected at the entrance at the cost of nearly no server load...
    I will try to describe the exact steps i have done later in this post
     
    blocker, Aug 22, 2008
    #2
  3. ddelbia

    ddelbia Member

    Hi, I solved that problem by installing clamd and spamd and modifying ispconfig's config files.
    I found the way in this forum.

    I also suggest to add in your apt/sources.lists the line

    Code:
    deb http://volatile.debian.org/debian-volatile etch/volatile main contrib non-free

    ----- CLAMD -----

    apt-get install clamav-daemon

    edit /home/admispconfig/ispconfig/tools/clamav/bin/clamassassin

    change the CLAMSCAN line to

    Code:
    CLAMSCAN=/usr/bin/clamdscan
    edit /etc/clamav/clamd.conf

    check the line ScanMail

    Code:
    ScanMail true
    vi /etc/clamav/freshclam.conf /home/admispconfig/ispconfig/tools/clamav/etc/freshclam.conf

    check NotifyClamd

    Code:
    NotifyClamd /etc/clamav/clamd.conf

    ----- SPAMD -----

    apt-get install spamassassin spamc

    edit /etc/default/spamassassin

    Code:
    ENABLED=1
    /etc/init.d/spamassassin stop
    /etc/init.d/spamassassin start

    edit /root/ispconfig/isp/conf/spamassassin.rc.master

    Code:
    :0fw
* < 64000
| /usr/bin/spamc

    And finally, to update the existing users configuration:

    mysql -p
    connect db_ispconfig
    update isp_isp_user SET status = 'u' WHERE status = '';
     
    ddelbia, Aug 22, 2008
    #3

Share This Page