긴급질문 스팸어세신 문제 입니다.

sendmail + spamassassin 를 사용중입니다.

리눅스 서버 보안관리 실무에 나온데로 스팸어세신 설치한후에

[root@www root]# ps -ef|grep spamd
root      2582     1  2 23:40 ?        00:00:00 /usr/bin/spamd -d -m10 -x -H -s
root      2586  2582  3 23:40 ?        00:00:00 spamd child
root      2587  2582  0 23:40 ?        00:00:00 spamd child
root      2627  2514  0 23:40 pts/1    00:00:00 grep spamd

위의 데몬이 생성되면서 필터링 규칙에 의해서 ***spam*** 이라는 제목에 추가되고 정상작동을 하다

어느순간 spamd 데몬에 모두 사라짐니다.

Tue Jan 10 23:42:02 2006 [2586] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 54563
Tue Jan 10 23:42:02 2006 [2586] info: spamd: processing message <200601101441.k0A73bSh031766@www.000.000> for se9:0
Tue Jan 10 23:42:02 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 127.
Tue Jan 10 23:42:02 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 127.
Tue Jan 10 23:42:03 2006 [2587] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 54564
Tue Jan 10 23:42:03 2006 [2587] info: spamd: processing message <200601101441.k0A73bSi031766@www.000.000> for se9:0
Tue Jan 10 23:42:03 2006 [2587] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 131.
Tue Jan 10 23:42:03 2006 [2587] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 131.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: clean message (4.6/5.0) for se9:0 in 1.0 seconds, 6091 bytes.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: result: .  4 - HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MAILTO_TO_SPAM_ADDR,MIME_BASE64_TEXT scantime=1.0,size=6091,user=se9,uid=0,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54563,mid=<200601101441.k0A73bSh031766@www.000.000>,autolearn=no
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: BB
Tue Jan 10 23:42:03 2006 [2586] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 54565
Tue Jan 10 23:42:03 2006 [2582] info: spamd: server successfully spawned child process, pid 2788
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: BBI
Tue Jan 10 23:42:03 2006 [2586] info: spamd: processing message <200601101441.k0AB3bZY025393@www.000.000> for se9:0
Tue Jan 10 23:42:03 2006 [2587] info: spamd: clean message (4.3/5.0) for se9:0 in 0.0 seconds, 6059 bytes.
Tue Jan 10 23:42:03 2006 [2587] info: spamd: result: .  4 - HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MIME_BASE64_TEXT scantime=0.0,size=6059,user=se9,uid=0,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54564,mid=<200601101441.k0A73bSi031766@www.000.000>,autolearn=no
Tue Jan 10 23:42:03 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 125.
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: BII
Tue Jan 10 23:42:03 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 125.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: clean message (4.6/5.0) for se9:0 in 0.0 seconds, 5893 bytes.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: result: .  4 - HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MAILTO_TO_SPAM_ADDR,MIME_BASE64_TEXT scantime=0.0,size=5893,user=se9,uid=0,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54565,mid=<200601101441.k0AB3bZY025393@www.000.000Tue Jan 10 23:42:02 2006 [2586] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 54563
Tue Jan 10 23:42:02 2006 [2586] info: spamd: processing message <200601101441.k0A73bSh031766@www.000.000> for se9:0
Tue Jan 10 23:42:02 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 127.
Tue Jan 10 23:42:02 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 127.
Tue Jan 10 23:42:03 2006 [2587] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 54564
Tue Jan 10 23:42:03 2006 [2587] info: spamd: processing message <200601101441.k0A73bSi031766@www.000.000> for se9:0
Tue Jan 10 23:42:03 2006 [2587] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 131.
Tue Jan 10 23:42:03 2006 [2587] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 131.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: clean message (4.6/5.0) for se9:0 in 1.0 seconds, 6091 bytes.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: result: .  4 - HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MAILTO_TO_SPAM_ADDR,MIME_BASE64_TEXT scantime=1.0,size=6091,user=se9,uid=0,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54563,mid=<200601101441.k0A73bSh031766@www.000.000>,autolearn=no
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: BB
Tue Jan 10 23:42:03 2006 [2586] info: spamd: connection from localhost.localdomain [127.0.0.1] at port 54565
Tue Jan 10 23:42:03 2006 [2582] info: spamd: server successfully spawned child process, pid 2788
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: BBI
Tue Jan 10 23:42:03 2006 [2586] info: spamd: processing message <200601101441.k0AB3bZY025393@www.000.000> for se9:0
Tue Jan 10 23:42:03 2006 [2587] info: spamd: clean message (4.3/5.0) for se9:0 in 0.0 seconds, 6059 bytes.
Tue Jan 10 23:42:03 2006 [2587] info: spamd: result: .  4 - HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MIME_BASE64_TEXT scantime=0.0,size=6059,user=se9,uid=0,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54564,mid=<200601101441.k0A73bSi031766@www.000.000>,autolearn=no
Tue Jan 10 23:42:03 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 125.
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: BII
Tue Jan 10 23:42:03 2006 [2586] error: Can't locate Mail/SPF/Query.pm in @INC (@INC contains: ../lib /usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1 /usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1 /usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.6.1/i386-linux /usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 272, line 125.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: clean message (4.6/5.0) for se9:0 in 0.0 seconds, 5893 bytes.
Tue Jan 10 23:42:03 2006 [2586] info: spamd: result: .  4 - HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_02,HTML_MESSAGE,HTML_SHORT_LINK_IMG_2,MAILTO_TO_SPAM_ADDR,MIME_BASE64_TEXT scantime=0.0,size=5893,user=se9,uid=0,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=54565,mid=<200601101441.k0AB3bZY025393@www.000.000>,autolearn=no
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: III
Tue Jan 10 23:42:03 2006 [2582] info: spamd: handled cleanup of child pid 2788 due to SIGCHLD>,autolearn=no
Tue Jan 10 23:42:03 2006 [2582] info: prefork: child states: III
Tue Jan 10 23:42:03 2006 [2582] info: spamd: handled cleanup of child pid 2788 due to SIGCHLD

위의 로그를 확인해서 보면 특별히 어떤이유로 데몬이 사라지는지 잘모르겠습니다.

제 생각에는 메일이 폭주할때  데몬이 사라지는것 같습니다.

같은 환경에 메일량이 별로 없는 서버는 데몬이 사라지거나 하는문제는 발생하지 않습니다.

메일량이 매우많을 경우 데몬이 사라지는 문제를 해결하는 방법을 알려주시면 감사드리겠습니다.