Hello All, I am currently in the process of setting up and testing a larger DSPAM Installation to protect around 1200 Domains with an unknown Ammount of Users, the current solution is SpamAssassin but rather "resource hungry". That alone isnt the Problem. Currently I kill about 95-98% of the Spam that reaches the Gateways, however recent Spams (such as those Fake Rolex Ad Spams) pass trough cause they are coming from proper configured Hosts and dont trigger any ClamAV Signatures and reach a rather low Score of 2.5 and below on SpamAssassin (lowering the Spam Score would cause way too many FP) thats why I am looking for alternatives, I'm using DSPAM since 2006 on my own Mailserver at home but now I need something large and Performance/Troughput is a big issue here.
The current Setup consists of 2x Postfix as MX with Policy Daemon, SR-52 Regex, ClamAV (i want to bounce virii mail rather than accept+quarantine) Those 2 are handing over Mails to the currently as active/passive Planned DSPAM Server during my evaluation I had quite different results, firstly i tested handing over mails trough lmtp direct into DSPAM and then reinject into Postfix running on that Machine. The Performance was very good, i reached 5k Mails per Minute. (25kb size generated with smtp-source) Next tests were done locally on the DSPAM Machine after recieving mail I had Postfix use content_scanner from master.cf and piped it into dspam client aswell as dspam socket. Pipe was fast as hell however the lmtp socket of dspam itself not. One thing that really annoyed me that if dspam is called from Postfix I have each Mail twice in my Mail Logfile which makes it alot harder to debug/analyze in case a Problem arises. Are there any Drawbacks if my setup uses the following: mx -> ltmp -> dspam-daemon -> localpostfix-on-dspam-machine -> smtp-relay -> final-mailbox|quarantine-imap-server instead of mx -> smtp -> localpostfix-on-dspam-machine -> dspamc/dspam-daemon -> localpostfix-on-dspam-machine -> smtp-relay -> final-mailbox|quarantine-imap-server I cannot afford to loose any email at all in case dspam dies in the middle of a transaction or while processing the mail. I'm all ears for any Tips that one can give me. Thanks for Reading and hopefully everything I wrote is clear - english is not my native language. Kind Regards Christian Keil
------------------------------------------------------------------------------
_______________________________________________ Dspam-user mailing list Dspam-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-user