Return-Path: <users-return-114905-archive-asf-public=cust-asf.ponee.io@spamassassin.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id 3F8BF200C5B
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Thu, 27 Apr 2017 19:31:44 +0200 (CEST)
Received: by cust-asf.ponee.io (Postfix)
	id 3E1CF160BA7; Thu, 27 Apr 2017 17:31:44 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id 84FF8160B9E
	for <archive-asf-public@cust-asf.ponee.io>; Thu, 27 Apr 2017 19:31:43 +0200 (CEST)
Received: (qmail 23967 invoked by uid 500); 27 Apr 2017 17:31:37 -0000
Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
list-help: <mailto:users-help@spamassassin.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@spamassassin.apache.org>
List-Post: <mailto:users@spamassassin.apache.org>
List-Id: <users.spamassassin.apache.org>
Delivered-To: mailing list users@spamassassin.apache.org
Received: (qmail 23955 invoked by uid 99); 27 Apr 2017 17:31:37 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd1-us-west.apache.org) (209.188.14.142)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 27 Apr 2017 17:31:37 +0000
Received: from localhost (localhost [127.0.0.1])
	by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id EA295D63E9
	for <users@spamassassin.apache.org>; Thu, 27 Apr 2017 17:31:36 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=0 tagged_above=-999 required=6.31
	tests=[RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001,
	URIBL_BLOCKED=0.001] autolearn=disabled
Received: from mx1-lw-eu.apache.org ([10.40.0.8])
	by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024)
	with ESMTP id BhgGMahzt8Uu for <users@spamassassin.apache.org>;
	Thu, 27 Apr 2017 17:31:33 +0000 (UTC)
Received: from mail.ivdc.com (mail.ivdc.com [208.82.180.66])
	by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 272355F4EE
	for <users@spamassassin.apache.org>; Thu, 27 Apr 2017 17:31:33 +0000 (UTC)
X-SmarterMail-Authenticated-As: billy@ivdc.com
Received: from billy.desktop (user-69-1-48-71.knology.net [69.1.48.71]) by mail.ivdc.com with SMTP;
   Thu, 27 Apr 2017 13:30:00 -0400
To: users@spamassassin.apache.org
From: Billy Huddleston <billy@nxs.net>
Subject: Strange Issues.
Message-ID: <791f9d2c-ba42-afb0-259b-477b3d17cdf1@nxs.net>
Date: Thu, 27 Apr 2017 13:31:13 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.7.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
archived-at: Thu, 27 Apr 2017 17:31:44 -0000

Hey Guys,

I just recently started having issues with spamd getting hung on emails. I've been seeing lots of emails with contact@qq.com and other contact@... domains.  I looked at a few of 
these messages and they all had this stuff in them..

<style>
 >>\\\>><<///<<??###??!!!??~~~???$$$???%%%****////>>><<<$#*))))*&^%$#@!~((((|||//////////2b85//|??????????////////*****}}>>****>><<&&&&<<}}{{{))))####(((({{$$$$>%%%%>>~~~!!!!~~~~<*&^<<)))*&^%$#!~?><(((

Now, In addition to this, I was running SA v3.3.2.  Yes, I know.. old version.. so first thing I did was upgrade.  Now running v3.4.1 Still having the issue.

Also, I found this error in the log files..

Can't locate loadable object for module Geo::IP in @INC (@INC contains: /usr/lib/perl5/site_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.5 
/usr/lib/perl5/5.8.5/i386-linux-thread-multi /usr/lib/perl5/5.8.5 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.5 
/usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.8.5/Geo/IP.pm line 42

This instance of SA is running on a rather older version of CentOS and has don't nothing but be a SA server all it's life. The Load average for the machine has been going through 
the roof too.. I've seen anywhere from 14 to 19 at times that this is happening.  Our mail volume hasn't increased nor has the spam/ham ratio.  So, I'm not sure what is going on. 
Any help would be appreciated.

Thanks, Billy