[Kolab-devel] high cpu-usage of kolab_smtp_access_policy

[Henning]

Hi!

I noticed that bug 780 appeared again and could not be resolved by
restarting postfix or emptying the queue. Killing the processes with

~$ killall kolab_smtp_access_policy

resolves the issue temporarily until it reappears. I don't know what
triggers it exactly. On outgoing mail the process is startet but it does
not always hangs with high cpu usage. Sometimes multiple processes are
spawned by postfix

~$ ps -eF|grep kolab_smtp_access_policy
kolab-n   8185  8183 82 48158 21936   3 07:42 ?        00:07:57
/usr/bin/python /usr/lib/postfix/kolab_smtp_access_policy
--verify-sender --allow-unauthenticated --timeout 15

(timeout explicitely set in /etc/postfix/master.cf) using the whole cpu.

~$ top
top - 07:51:29 up 2 days,  7:33,  1 user,  load average: 3,07, 2,98, 12,81
Aufgaben: 252 total,   5 running, 247 sleeping,   0 stopped,   0 zombie
%Cpu(s): 46,0 be, 12,7 sy,  0,0 ni, 34,4 un,  6,2 wa,  0,7 hi,  0,0 si,
 0,0 st
KiB Mem:   4037776 total,  3344316 used,   693460 free,   879568 buffers
KiB Swap:        0 total,        0 used,        0 free.   264968 cached Mem

  PID BENUTZER  PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+
COMMAND
 8365 kolab-n   20   0  192640  21944   4952 R 100,0  0,5   3:40.03
kolab_smtp_acce
 8185 kolab-n   20   0  192632  21936   4952 R 100,0  0,5   7:34.74
kolab_smtp_acce
 8188 kolab-n   20   0  192632  21944   4952 R 100,0  0,5   7:34.64
kolab_smtp_acce

I cannot see anything suspicious in my mail.info log.

In postfix main.cf I have

-----

submission_sender_restrictions = reject_non_fqdn_sender,
check_policy_service unix:private/submission_policy,
permit_sasl_authenticated, reject

smtpd_recipient_restrictions =  permit_sasl_authenticated,
                                permit_mynetworks,
                                reject_unauth_pipelining,
                                reject_non_fqdn_recipient,
                                reject_invalid_helo_hostname,
                                reject_rbl_client zen.spamhaus.org,
                                reject_unauth_destination,
                                reject_unknown_recipient_domain,
                                check_policy_service
unix:private/recipient_policy_incoming,
                                permit

smtpd_sender_restrictions = permit_mynetworks,
                            permit_sasl_authenticated,
                            check_policy_service
unix:private/sender_policy_incoming

smtpd_relay_restrictions = permit_mynetworks,
                           permit_sasl_authenticated,
                           reject_rbl_client zen.spamhaus.org,
                           check_policy_service
unix:private/recipient_policy_incoming

-----

I'm on Ubuntu 14.04 with pykolab 0.6.10-0~kolab1 (kolab 3.1 from 12.04
repo) and postfix/postfix-ldap 2.11.0-1.

Please fix this soon. For now I schedule the process-killer.

Ciao,
Henning