Re: [Declude.JunkMail] Declude Woes

[Matt]

The only issue known to this list regarding Declude that can affect Declude users in this way would be an incompatibility with IMail 8.20.  IMail 8.20 introduces a rewrite of the SMTP service which was a major change, and sure enough this created issues for some users when they ran up against it (seem to mostly/only affect high volume installations and they are soon going to release a patch). Besides this bug, there are many of us that can run into issues based on just the sheer volume of E-mail.  One person pointed out that they had someone bulk-mailing through their hosted mail server that was bogging everything down.  I have seen tons of other things related to just simply sheer volume that cause such issues, among them would be having nobody aliases for domains that are being dictionary attacked, getting bounce messages from another server that result from a massive mailing, all sorts of loops created by auto-responders and forwarding loops, gatewaying E-mail for other domains without a way to do address verification on incoming messages, being an open relay, and the list goes on. I think that before one assumes that it is Declude's fault, you should look at the environment and figure out if the traffic is normal, or abnormal.  You can generally just compare the size of the Declude and IMail logs over time in order to figure out if there is some sort of a spike.  If you find abnormal traffic, then chances are that one of the things that I pointed out is the issue and that needs to be resolved. In Robert's issue below, the fact that you are cleaning up GSE files points to a non-Declude issue.  GSE files are generated for bounces, and it suggests that you are accepting E-mail for addresses that don't exist.  If there is a huge volume of these, there is a definite issue with the environment, and it wouldn't be uncommon for Declude to get backed up. Matt Robert wrote: Hello, This has been an ongoing issue for us also, I have a minimum of test running. If I really try to run any indepth test it just falls way behind. I have a 3 ghz server Imail 7.15 Declude 1.77i31 Windows2000 Even now I still get hit. It just can't keep up. I have tried 4 different DNS servers, It made no diff. This is my 3rd Mail server within the last year. Not much help. My filter files are small. The largest has 400 lines in it. But I can't use it because it slows down thing to much. So what did I do to help? I have resorted to running a bat file to delete the .gse files. Every three hours during the day, Every hour during the nite when the spammer are at work. This helps to keep the spool directory from over loading to the point it can't even be veiwed with a windows explorer. No one complained, My logic was (and I am sure has hole in it) If my server cant send a bounced massage after a couple of tries ,I won't get sent at all. Run very small filter files if any at all. Run a different IP address on the firewall for the outside MX. Customers use a different IP address (dns name) Because only mail servers are supose to use the outside IP address that can hit very high on CMD Space test. I also have a test to subtract points for CMD Space test from our IP space. This seem to catch a lot of spam with out bogging down the server. Plus I can kill port 25 on the Outside MX IP address giving our server time to catchup. This lets our users still send but incoming mail will be resent to us later. Thats about the best I can offer...... I have been looking for something better for some time now. That one reason why I haven't upgraded. Robert Whitaker The Modem Pool 517-789-5689 1-888-377-5689 Be sure to try the New Web Express Internet Accelerator from The Modem Pool http://web-express.modempool.com ----- Original Message ----- From: Nick Hayer <[EMAIL PROTECTED]> To: <Declude.JunkMail@declude.com> Sent: Thursday, July 28, 2005 10:59 AM Subject: Re: [Declude.JunkMail] Declude Woes Hi Will, Sorry you are having problems - Declude is a good product - it may be something simple here. I would say the most common thing is a dns issue - stuff stacks up waiting for dns responses. Check that out first - send more info too! -Nick Will wrote: A number of years ago I purchased Declude and ultimately abandoned it due to the crippling problem that would leave our spool directory overfilled with mail and a mail server that was delivering mail late. Sometimes up to 24 to 48 hours late in the worst cases. Last year I decided to give Declude a chance again and repurchased the software upgrade. It's been over a year now and I still have the same problem. It's killing me. Declude will create an overflow directory and mail will just pile up, customers will get angry, and we look the fool. I have spoken with Declude support about this and they had me change a value in my virus.cfg to "MAXATONCE 1". I still see a number of declude.exe processes when the overflow directory comes into use and the overflow directory is never used when I disable Declude. Right now, my mail server is a couple hours behind with over a hundred thousand messages in cue. I have disabled Declude so the server can catch up, but I still want antivirus and spam protection. I am all out of ideas and resources. I had thought the antivirus was taking too long to process at one point and my last concern was that DNS resolution was not fast enough for the SPAM tests, however, when enabled, the Imail integrated black lists resolve fast enough that I do not see this problem. Does anyone have any suggestions? Or better yet experience with this issue and know of a cause or resolution. I've grown to fear the overflow directory and I would have thrown out Declude already if not for the lack of chatter about this issue on the list. Will --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================