George how did you pull those stats together? Did you use the same log analyser as mentioned in this list?
Mark Chadwick IT Support Engineer Science International Bateman House 82-88 Hills Road Cambridge Cambs CB2 1LQ +44(0)1223 326500 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of George Peace Sent: 13 December 2001 17:07 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] MISSING_REVERSE_DNS:Load experience We're running 125,000 to 140,000 messages/day with around 30,000 mailboxen. Yes, there's trouble but there's no blame implied... Two things have happened. One is that we had to shut off incoming virus scanning to keep the imail box stable for more than a few hours at a time. The other, unexpectedly, is that we've been contacted by two spam/IP listing services and told we're their heaviest name server user. One politely asked us to make changes. The other is doing a hit/miss study on us. Over the last 10 days we've scanned (f-prot) 6,500 - 14,000 outbound messages a day with infection numbers ranging between 15% and 28%. Here's a sample stat for those of us who stare at numbers... Total Emails Scanned = 14,116 Total Emails Clean = 11,365 Total Emails Infected= 2,751 Percent of Emails Infected to Total Emails Scanned: 19.4885% Count= 1,092 Virus Name= W32/Badtrans.B@mm Count= 798 Virus Name= W32/Hybris.worm.B Count= 695 Virus Name= W32/Sircam.worm@mm Count= 51 Virus Name= W32/Hybris.worm.D Count= 49 Virus Name= W32/Magistr.28672@mm Count= 47 Virus Name= W32/Magistr.32768@mm Count= 17 Virus Name= W32/Aliz.A Count= 1 Virus Name= JS/Kak.A@m Count= 1 Virus Name= W32/MTX.9244.worm.A >Is there someone who has tried to run IMAIL & DECLUDE with a load of >over 50.000 msg./day? >The server should act only as SMTP-Gateway, no POP3 or IMAP-load. > >There is a ISP having a lot of trouble since the last "virus-wave" in >the last two weeks. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
