Re: [Declude.JunkMail] Mail Backlogging

[Matt]

Will, You want to attach your Declude.cfg and not your Global.cfg.  If you haven't tweaked those settings, you will likely have issues at 140,000 per day.  If  you post it I'm sure that there will be some recommendations that will take care of your issues. Matt Will wrote: I am using hijack with its default settings. My Declude seems to function just fine as I'm watching but every other or third weekend it seems like I come in on a Monday to see a couple hundred thousand messages in the proc folder. I only allow 50 recipients per message, have no loops, no catchall aliases. Looks like I typically receive around 140,000 per day so it is pretty strange to come in after two days and see 500,000 messages. However, it was a holiday weekend... A report for one of my normal days can be seen here: http://mail.ncats.net/report.html My global.cfg is attached I'm a little confused about the syntax of the country command. Is there any official documentation or examples available? I have been searching for them with little luck. It would be nice to have a declude log analyzer that would display a list of IP's organized by spam counts so I could start blacklisting some subnets, If that would be at all helpful to me. Will -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Craig Edmonds Sent: Tuesday, May 30, 2006 11:33 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Mail Backlogging Importance: High I would also recommend the declude hijack filter. It has saved me a couple of times. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] Marbella Guide Web Portal W: www.marbellaguide.com E: [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Tuesday, May 30, 2006 5:10 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Mail Backlogging Will, Do you have any catch-all (nobody) aliases for any of your domains? If so, a single such domain can overwhelm a server when under dictionary attack. Catch-alls must be removed. The traffic will disappear immediately if this is the case. Also, it is definitely not uncommon for a business like yours to have clients using your server for bulk-mailing. You should set reasonable recipient limits per message (like 50 or so) and watch for people that have automated software that sends out even more. Looping can cause issues like this as well. Lastly, you may need to tweak your Declude.cfg settings in order to handle the normal traffic that you see. It seems that a lot of the higher volume servers backup when using the default settings, so this effect may be different from what you were seeing in the past. Maybe you could share your normal and peak volume along with your Declude.cfg settings with the list and get some feedback. Matt Will wrote: I have had a problem with my Imail server backlogging mail for years now where the spool directory will fill with hundreds of thousands of messages. Now it's the proc folder with the new version of declude. This issue has been ongoing throughout the years as I have upgraded both Imail and Declude. It has come to the point where I have to purge 500,000 messages to get my mail server running again. I'm not sure what to do, as I need the virus and spam protection. Is there a way to block all mail from Romania and china? Will --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. [ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You For Using 123 Marbella Internet ] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.