>I'm not sure how to go about checking for a sudden high volume of e-mail.
>Is there a utility that graphs out # of e-mails on an hourly basis or
>something?
Unfortunately, I don't think there is any program that will graph it
out. However, if you see that there is a problem, you can just check the
log files around that time to get a good idea of what is happening (typing
'find "rdeliver" sys####.txt' and 'find "ldeliver" sys####.txt' will show
you a list of all the E-mail that is sent through your mailserver; you can
quickly look at it through Notepad to get an idea of who is sending what,
if there is a pattern).
>My timeout setting is: "SCANNERTIMEOUT 3600" which translates to 60
>minutes.
I would recommend lowering that to perhaps SCANNERTIMEOUT 300 (5 minutes),
as normally it should never take more than a minute or so to scan an
E-mail. Even when we get spam attacks on our live server, and high CPU
usage, I haven't seen the scanning taking long.
>What could freeze these processes like that? And if this is what's
>happening doesn't that mean all
>these timed out e-mails are NOT getting scanned for virii?
If the scanner processes are timing out, you'll see an error message in the
Declude Virus log file. When the scanner times out, the E-mail is not
scanned -- there just isn't any way around it. However, under normal
operation (even under heavy load) that shouldn't happen. Typically, this
only happens when there is a configuration problem (such as a typo in the
SCANFILE line that the scanner doesn't understand, and waits for user
input), but that happens to all E-mails and is quickly noticed.
>Also, on a possibly related issue. Once in a while we get a single *.vir
>directory that locks up in the spool directory. The *.vir directory is
>empty, but it refuses to go away. I can't delete it either. The only thing
>I can do is reboot the server, that releases the lock and allows me to
>delete the empty folder.
That will happen if another process has the file open -- do you have an
on-access virus scanner running? Usually, that's the only reason that
Declude (and you) won't be able to delete those files.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
