Do you see anything out of the ordinary in your logs?
Darrell
Joshua M. Hughes writes:
Sorted by CPU the system process is first and second is a toss up between
declude, smtpd32, and queuemgr followed by as many as 16 simultaneous
instances of declude with cpu between 1 and 4. The system is running at 45 to 60 and at times Declude shows up first
between 45 and 60. When I change the delivery application to smtp32.exe the
system process drops between 8 to 11 and finally the top of the list is the
system idle process.
No knew filters have been added.
In the global.cfg file there was a whitelisted address and a whitelisted
domain. For the whitelisted domain I created a folder in the imail\delcude Folder for that domain with a blank $default$.junkmail. For the one
whitelisted address a I created a folder for that domain in the
imail\declude folder with the $default$.junkmail "copy not blank" and
created a blank user.junkmail file for that user. These changes have been
reversed and still have not solved the issue.
Does creating a domain folder with a blank $default$.junkamil file, as
compared to whitelisting a domain in the global.cfg, use more processing
power?
Thank you,
Joshua
Sunline Team
(941) 206-7870
http://www.sunline.net/
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, January 05, 2005 12:02 PM
To: [email protected]
Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix
I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage.
When you go to the Process tab in the Task Manager, and click on the CPU button, which process(es) are nearest to the top?
Note that this should not be related to the SPAMHEADERS issue.
Did you make any changes to the Declude configuration recently (such as adding filters, which can eat up CPU time, depending on what they do and how they are designed)?
I don't want to go through and comment out each test one at a time to find which the offender is.
If it does come to that, you can do it the "binary way." First, comment out 1/2 the tests. If the problem continues, uncomment the ones you just commented out, and comment out 1/2 of the ones that you did not comment out (if the problem does not continue, do the opposite -- uncomment 1/2 of the ones that you commented out originally). If you have 30 tests, you'll only have to do this 5 times. The drawback is that during the few minutes you are doing this, spam is more likely to come through.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
----
This outgoing message is guaranteed to be authentic by Message Level users.
Guarantee the authenticity of your email @ http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
