Too many content filter updates in /var/lib/dca/init/dca_mail/update/ causes system outage

Technote (troubleshooting)


Sometimes it happens that Lotus Protector is unable to do the daily merge of the incremental content filter updates for the mail security database (*.upd files) into the main database (*.fdb file). If this happens a few days in a row the systems may collect several thousand update files in /var/lib/dca/init/dca_mail/update/ which will then prevent the mail security system from being restarted properly - as a result the system restarts in an endless loop and does not process any messages.

Note: in rare cases the same issue may also happen for URL filter database (/var/lib/dca/init/dca_urlclassification/update), although this is rather unlikely since the system does not get updates for the URL database with the same frequency as it does for Spam signatures database


Evidence that the system has the problem described above:

- the mailsec daemon is restarted every 6 -7 minutes (check the restart.log in /cache/mailsec/logs)
- while the mailsec process is running it uses 99 % CPU
- the directory /var/lib/dca/init/dca_mail/update contains more than 300 *.upd files (the number of *.upd files a system can handle depends on the hardware (CPU / RAM))
- the system log (/var/log/messages) shows a warning every 6 -7 minutes like the following:
Apr 22 03:13:57 e4 pvmail[13448]: id=MS time="2013-4-22 3:13:57" fw=e4
pri=6 issueid=6000011 name=MSM_StartStop msg="Restarting process 13455,
no heartbeat received within 301 seconds"
(the watchdog restarts the mailsec daemon)

Resolving the problem

Necessary steps to get the system running again:

1. delete the *.upd files

cd /var/lib/dca/init/dca_mail/update/
rm *.upd
cd /var/lib/dca/init/dca_urlclassification/update/
rm *.upd

2. restart the mailsec daemon

service mailsecd restart

(Optional) install the following patch to make sure that the system can't get into the issue again:

cd /tmp
service mailsecd stop
rpm -U isslibs-1.0.2-11756.i586.rpm
service mailsecd start

    Cross reference information
    Segment Product Component Platform Version Edition
    Security Proventia Network Mail Security System Not Applicable Firmware 2.5.1, 2.8 All Editions

Document information

More support for:

Lotus Protector for Mail Security

Software version:

2.5.1, 2.8

Operating system(s):


Software edition:

All Editions

Reference #:


Modified date:


Translate my page

Content navigation