I have had the same problem again last night. This time all the files towards the end of the debug log do exist however the end of maillog is exactly the same:
2012-06-16 22:26:51 [Worker_1] Connected: 195.154.153.138:60066 > 195.88.101.109:25 > 127.0.0.1:125 2012-06-16 22:26:51 [Worker_1] 195.154.153.138 [SMTP Reply] 220 mail2.smtphost.co.uk ESMTP Exim 4.76 Sat, 16 Jun 2012 22:26:51 +0100 2012-06-16 22:26:51 [Worker_1] 195.154.153.138 [SMTP Reply] 250 HELP 2012-06-16 22:26:51 [Main_Thread] Info: Main_Thread freed by idle Worker_1 in 0.101 seconds It looks like something that IP is doing is causing ASSP to crash but only when rebuild is running. I'd block it but it belongs to a major retailer in the UK (Debenhams) and is used for legitimate mail. I'll turn on debugging for that IP, though will have to keep an eye on the size of the logs. All the best, Colin. On 16/06/2012 09:41, Colin wrote: > Last week I had a number of ASSP restarted during rebuildspamdb. > > When I created the debug file, the problem disappeared for a while but > it has struck again tonight. > > The last two files referenced in rebuilddebug do not actually exist. > They are not referenced in rebuildrun as files being moved/removed - the > last line in rebuildrun is dated 14 seconds before the last line in > rebuilddebug. > > Is it likely that rebuildspamdb is erroring if a file gets moved between > the list of files being generated and the list of files being accessed? > Alternatively is it possible that whatever rebuildspamdb was doing has > removed those messages? > > Alternatively is something else crashing the ASSP? The last line in > maillog is a remote IP issuing the HELP command immediately after > connecting. > > Log files as follows: > > -rw-r--r-- 1 root root 3882 Jun 15 22:21 rebuildrun.txt > 2012-06-15 22:21:02 remove > /usr/local/assp/store/spam/Expiration_notice_Only_7_day_s_remaining_to_renew_--169810.eml > WhiteList: '[email protected]' > > -rw-r--r-- 1 root root 1083057 Jun 15 22:21 rebuilddebug.txt > 2012-06-15 22:21:16 file (7357): > /usr/local/assp/store/spam/If_Something_Breaks_In_Your_Home_We_Fix_It_Or_Repl--151938.eml > 2012-06-15 22:21:16 file (7358): > /usr/local/assp/store/spam/Life_Insurance_from_1_per_week--151539.eml > > maillog > 2012-06-15 22:21:15 [Worker_1] Connected: 195.154.153.138:60563> > 195.88.101.109:25> 127.0.0.1:125 > 2012-06-15 22:21:15 [Worker_1] 195.154.153.138 [SMTP Reply] 220 > mail2.smtphost.co.uk ESMTP Exim 4.76 Fri, 15 Jun 2012 22:21:15 +0100 > 2012-06-15 22:21:15 [Worker_1] 195.154.153.138 [SMTP Reply] 250 HELP > > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
