Re: [Declude.JunkMail] 2005 SpamHeaders - Fix -

[Matt]

A 200 MB normal IMail log file (not set to verbose or debug) would correspond to more than 200,000 messages on my system.  I don't log POP3 stuff though, so that might also explain the difference. Please zip up yesterday's Declude JunkMail log and post it to a Web site somewhere and send me the link off-list and I will stats on it to determine how many messages that Declude processed.  I'm still suspecting volume might be the issue, and it is generally the most likely culprit and deserves extra attention. It could be that you have a customer bulk-mailing through your server.  People get a copy of Microsoft Office these days and set up their own newsletters using their provider's SMTP server. I don't believe that 60% fragmentation would cause a significant slowdown, though you would get slightly better performance when defraged, so do that regularly and as soon as it makes sense. Just to keep one step ahead, why don't you indicate which virus scanners you are running (with versions) and confirm your settings in Declude Virus for "PRESCAN" being ON or OFF. Matt Joshua M. Hughes wrote: John, It took me a while to get these stats. I reviewed the SMTP logs for 12/4, 12/5, 12/7, & 12/8. I know the server was running fine during this week. Usage is as follows. 12/4 - 83,170 messages 12/5 - 82,065 messages 12/7 - 95,087 messages 12/8 - 95,730 messages I reviewed the SMTP logs for the 1/2, 1/3, & 1/4. These are current and usage is as follows. 1/1 - 59,717 messages 1/2 - 63,795 messages 1/3 - 78,945 messages 1/4 - 79,410 messages It appears as if the beginning of last month, when we were running fine, had a lot more messages being delivered. The only things I see in the log disturbing for today are: [EMAIL PROTECTED] 4.63.108.6 = 1130 messages <> = 1068 messages I have an ipfile that I have set to automatically delete anything from the ip 4.63.108.6 because they have been the top sender of the log for three days. However, this messages is still being processed. Matt, Average SMTP log size is between 102MB to 200MB. This appears normal. The drive that the logs were on wasn't severely fragmented however, I de-fragmented it anyway. The drive that the spool directory is on is 86% free but about 60% fragmented. This drive could be de-fragmented however, I'm worried about de-fragmenting while the CPU is at 100%. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, January 05, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix The CPU spike is probably do to sheer volume. What is the current volume of messages being processed? John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 8:22 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] ------------------------------------------------------------------- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================