I'm not entirely certain that this is a spamassassin issue, but since I can't find a more likely culprit I thought I'd check here... We're running SA 3.04 on Solaris 8.
This past weekend our mail relays started using up too much swap. Looking in /tmp, I fould a bunch of files similar to these: -rw------- 1 exim exim 483245088 Jan 17 10:18 099b0003.$$$ -rw------- 1 exim exim 479784296 Jan 17 10:18 099b0004.$$$ Some were as old as September or December, though most were from this weekend. The files all contain stuff like this: ----- spamExperiments/lz78RWordsFile5. ERROR: baesys not in spamExperiments/lz78RWordsFile5. ERROR: tems.co not in spamExperiments/lz78RWordsFile5. ERROR: -Appa not in spamExperiments/lz78RWordsFile5. ERROR: y-To: not in spamExperiments/lz78RWordsFile5. ERROR: ps.com R not in spamExperiments/lz78RWordsFile5. ERROR: eceived: (E not in spamExperiments/lz78RWordsFile5. ERROR: GP: not in spamExperiments/lz78RWordsFile5. ERROR: -8_ not in spamExperiments/lz78RWordsFile5. ERROR: 1_0_ not in spamExperiments/lz78RWordsFile5. ERROR: 1); not in spamExperiments/lz78RWordsFile5. ERROR: 22 Aug 200 not in spamExperiments/lz78RWordsFile5. ERROR: 2 16:11 not in spamExperiments/lz78RWordsFile5. ERROR: :28 - not in spamExperiments/lz78RWordsFile5. ----- I can see obvious bits of Received: headers in there, but that's about all that's recognizable. Also, every one of them references the same "lz78RWordsFile5" file. I can't find that file anywhere, nor can I find any reference to "spamExperiments" or the file anywhere. I also can't find anything in syslog, but I might just be missing it. Any ideas? K.
