RE: [Declude.JunkMail] High CPU usage

[Rick Hogue]

If I turn off SMTP my processor utilization is around 3 percent. With SMTP turned on and Declude turned off SMTP is at 99% with Declude on it is 100% So I kind of doubt that it is Declude even with the large lists I am using. Thanks for the advice on F-Prot I will look into that as a possibility. I like Innoculate but it is a bear to configure. If it had not been for Scott I would really have been in a mess with it. I just checked the processors on that system and now I am running at between 20 and 45% rather than the 100 I have been for the past 4 days. I guess I am going to have to look through snoop to see what it possibly could be.   Rick Hogue www.intent.net Web Hosting 1-800-866-2983 www.prosperity.com Featured web site       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, April 28, 2004 7:22 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] High CPU usage Is SMTP32.exe running at 100% or is it the total processor utilization?   I'm not sure how you might "shut down Declude" unless you change the SMTP service to not call it and stop and restart it.  Your previous message strongly suggested that your virus scanner isn't responding properly and that would be the first place to look.  We're doing about 35,000 messages a day and Monday set a record for viruses which probably came in around 6,000.  I would consider that volume of viruses to be out of the ordinary, but Netsky loves to send huge numbers of messages, with many going to invalid addresses that it parses from Message-ID's.  You might try turning off the nobody alias if this is the case.  Another strong suggestion would be to use F-Prot instead of Inoculate.  My testing of various virus scanners with Declude showed F-Prot to be MUCH more efficient (the version that you pay for).  That might solve your problem right there.  F-Prot is cheap and it's the best command line scanner around when it comes to efficiency, hands down. With similar traffic on my server, and it being similar in size (a little more powerful), it would croak no doubt about it with a blacklist of 30,000 entries, in fact with a total of less than 5,000 lines of matches of various types, it couldn't manage if it wasn't for SKIPIFWEIGHT which defeats most of the filters about 70% of the time (not possible with ipfiles and fromfiles, though they are much leaner than body searches). Just throwing out a few ideas. Matt Rick Hogue wrote: SMTP is the culprit here. I can shut down declude and the usage is still at 100%. No DNS changes have been made. Viruses are being caught at the rate of about 1100 every 3 hours. Is there any know issue on Imail that you know of on smtp. I am running version 8.05 Rick Hogue www.intent.net Web Hosting 1-800-866-2983 www.prosperity.com Featured web site -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, April 28, 2004 5:04 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] High CPU usage Thanks I have disabled both and still have high CPU usage. I run inoculate as my virus protection as well but do not think it is really the problem. In that case, you can go to the Task Manager, click on the Processes tab, and then click the CPU button. That will sort the processes by CPU usage, with the offender(s) at the top. I viewed the processes and I am still seeing 40 to 60 simultaneous declude calls with the same number of inoculate calls. Did you make any DNS changes (switching DNS servers in the IMail SMTP settings, for example)? That could cause the Declude.exe processes to stay in memory. Are viruses getting caught? If inoculate is not responding, the processes would stay in memory a long time (and viruses would not get caught). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================