RE: [Declude.JunkMail] Declude Woes

Thu, 28 Jul 2005 10:32:06 -0700

Matt beat me to it. I hope you are not using a nobody alias anywhere. The large amount of GSE files are indicative of a misconfiguration or improper configuration within Imail.

 

Also as Matt said, some people are becoming too quick to point a finger at Declude. I posted some questions for you to answer and you have not yet done so.

 

You mentioned you have tried different DNS servers. DNS servers is one of the things I have asked about. Many of use have found that by configuring the Imail server as a CACHE only DNS server, not using forwarders but relying on root hints, and configuring Imail and Declude to use the local DNS server have sped things up.

 

John T

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Thursday, July 28, 2005 9:24 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] Declude Woes

 

The only issue known to this list regarding Declude that can affect Declude users in this way would be an incompatibility with IMail 8.20.  IMail 8.20 introduces a rewrite of the SMTP service which was a major change, and sure enough this created issues for some users when they ran up against it (seem to mostly/only affect high volume installations and they are soon going to release a patch).

Besides this bug, there are many of us that can run into issues based on just the sheer volume of E-mail.  One person pointed out that they had someone bulk-mailing through their hosted mail server that was bogging everything down.  I have seen tons of other things related to just simply sheer volume that cause such issues, among them would be having nobody aliases for domains that are being dictionary attacked, getting bounce messages from another server that result from a massive mailing, all sorts of loops created by auto-responders and forwarding loops, gatewaying E-mail for other domains without a way to do address verification on incoming messages, being an open relay, and the list goes on.

I think that before one assumes that it is Declude's fault, you should look at the environment and figure out if the traffic is normal, or abnormal.  You can generally just compare the size of the Declude and IMail logs over time in order to figure out if there is some sort of a spike.  If you find abnormal traffic, then chances are that one of the things that I pointed out is the issue and that needs to be resolved.

In Robert's issue below, the fact that you are cleaning up GSE files points to a non-Declude issue.  GSE files are generated for bounces, and it suggests that you are accepting E-mail for addresses that don't exist.  If there is a huge volume of these, there is a definite issue with the environment, and it wouldn't be uncommon for Declude to get backed up.

Matt



Robert wrote: 

Hello,
 
This has been an ongoing issue for us also,
I have a minimum of test running.
If I really try to run any indepth test it just falls way behind.
I have a 3 ghz server
Imail 7.15   Declude 1.77i31  Windows2000
Even now I still get hit. It just can't keep up.
I have tried 4 different DNS servers, It made no diff. This is my 3rd Mail
server within the last year. Not much help.
My filter files are small. The largest has 400 lines in it. But I can't use
it because it slows down thing to much.
 
So what did I do to help?
 
I have resorted to running a bat file to delete the .gse files. Every three
hours during the day, Every hour during the nite when the spammer are at
work.
This helps to keep the spool directory from over loading to the point it
can't even be veiwed with a windows explorer.
 No one complained, My logic was (and I am sure has hole in it) If my server
cant send a bounced massage after a couple of tries ,I won't get sent at
all.
 
Run very small filter files if any at all.
 
Run a different IP address on the firewall for the outside MX. Customers use
a different IP address (dns name)
Because only mail servers are supose to use the outside IP address that can
hit very high on CMD Space test.
I also have a test to subtract points for CMD Space test from our IP space.
 
This seem to catch a lot of spam with out bogging down the server.
 
Plus I can kill port 25 on the Outside MX IP address giving our server time
to catchup. This lets our users still send but incoming mail will be resent
to us later.
 
Thats about the best I can offer......
 
I have been looking for something better for some time now.
 
That one reason why I haven't upgraded.
 
Robert Whitaker
The Modem Pool
517-789-5689
1-888-377-5689
 
Be sure to try the New Web Express Internet Accelerator from The Modem Pool
http://web-express.modempool.com
 
 
 
 
 
----- Original Message -----
From: Nick Hayer <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, July 28, 2005 10:59 AM
Subject: Re: [Declude.JunkMail] Declude Woes
 
 
  


Hi Will,
 
Sorry you are having problems - Declude is a good product - it may be
something simple here. I would say the most common thing is a dns issue
- stuff stacks up waiting for dns responses. Check that out first - send
more info too!
 
-Nick
 
 
Will wrote:
 
    



A number of years ago I purchased Declude and ultimately abandoned it
due to the crippling problem that would leave our spool directory
overfilled with mail and a mail server that was delivering mail late.
Sometimes up to 24 to 48 hours late in the worst cases.
 
Last year I decided to give Declude a chance again and repurchased the
software upgrade.  It's been over a year now and I still have the same
problem.  It's killing me.  Declude will create an overflow directory
and mail will just pile up, customers will get angry, and we look the
fool.  I have spoken with Declude support about this and they had me
change a value in my virus.cfg to "MAXATONCE 1".  I still see a number
of declude.exe processes when the overflow directory comes into use and
the overflow directory is never used when I disable Declude.
 
Right now, my mail server is a couple hours behind with over a hundred
thousand messages in cue.  I have disabled Declude so the server can
catch up, but I still want antivirus and spam protection.  I am all out
of ideas and resources.  I had thought the antivirus was taking too long
to process at one point and my last concern was that DNS resolution was
not fast enough for the SPAM tests, however, when enabled, the Imail
integrated black lists resolve fast enough that I do not see this
problem.
 
Does anyone have any suggestions?  Or better yet experience with this
issue and know of a cause or resolution.  I've grown to fear the
overflow directory and I would have thrown out Declude already if not
for the lack of chatter about this issue on the list.
 
Will
 
 
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
 
 
 
 
      



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
 
    



 
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
 
 
  











-- 
=====================================================
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=====================================================

Reply via email to