Re: [Declude.JunkMail] TextFilter file, how many entries ?

[Matthew Bramble]

I have two virus scanners with JunkMail Pro fully enabled plus 160 KB of active filters (~10 KB in comments) on a dual 1 Ghz PIII/1 Ghz memory/RAID 5/Win2k server also running a bunch of other Web services, and it takes maybe 5-7 seconds for me to send a very short message to myself and have it come back.  If I sent a large executable file though, it would take my server 20 seconds or so to get it back to me, probably mostly because of the virus scanning (Declude only scans the first 32K of the message with text filters).  Currently we handle just over 3,000 messages a day, and the processors normally don't go over the 15%-20% range.  Without the second scanner and all the custom filters, that was more like 5%-7% as a peak.  I certainly expect the server to handle much more than 6 times the current traffic.  I'll probably be looking to optimize a bit more at that point though. Matt John Shacklett wrote: I posted a question two weeks ago asking if anyone knew a way to calculate the amount of time it takes for individual messages to clear the entire receive/virusscan/junkmailscan/deliver process, and this exactly why I asked. My system doesn't have any filters quite as large as 140kb, or even 70k, but I keep adding steadily to them and it "feels" like things are somewhat slower. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Markus Gufler Sent: Thursday, 30 October 2003 3:54 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] TextFilter file, how many entries ? My question is, How many entries can I put in the file before Declude slow down ? I think this depends on -what HW-ressources you have in use (CPU, storage,...) -how much mail traffic you have during peak times I've had a problem some days ago by adding two filter files having both around 140 kB (one for body one for header filtering) At midnight all worked fine but next morning at around 9:00 AM it was almost not more possible to logon to the server. Ping whas ok, but it has taken over a minute to display the Terminal services login screen. After logging on I've had to wait for over 5 Minutes to see the desktop. Other 2 Minutes to open the taskmanager and see that there was a lot of declude.exe's having CPU-times of over 60 seconds and consuming all disponible CPU-resources. We've running Imail v7.15 on a Intel P4 2,6 GHz and IDE Raid mirroring Declude Junkmail and Virus with 2 scan engines. First I've tried to disable the second AV engine without a result. After removing the two filter files all become normal. We process around 4000 msgs/day. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.