Ding Ding Ding Ding Ding Ding
You have gatewayed domains. Gateway to what kind of server. You are most likely seeing dictionary type spam attacks to the gateway domains, in which Imail is indeed accepting all and then having to deal with the non-deliverable when it attempts to send it to the gatewayed server. So yes, it makes perfect sense that the spool is backing up, as your server is being flooded. You need to use exchange2aliases. John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: Keith Johnson [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Thursday, January 06, 2005 5:14 AM To: [email protected] Subject: RE: [IMail Forum] Nobody vs Rejects Sanford, As always, I appreciate your comments. I agree with you it doesn't seem right that the queue should grow with a ton of env. rejections. I thought SMTPD handled the rejections. The CPU on both seem to be fine, as in, good peaks and valleys, never above 50%. I was on there at 4am this morning and noticed a backlog had happened around 3am. Thus over 3000 items in queue, most of which was spam of course. We use Imail Registry database and no errors are being reported in the log. We have poured through the log and are in the process of getting per hour numbers during this time frame to see where connections are coming from. This box hosts both virtuals and gateway clients. It is just doesn't make sense that Queue Mgr stalls (always shows STARTED as a service, with no event log errors nor errors in the queue). Could it be that a high level of spam connections could overload queue manager with the understanding that the cpu never goes over 50%? I am wondering if there is an issue with the actually Imail exe's. Thanks again for the aid and time. Keith -----Original Message----- From: [EMAIL PROTECTED] on behalf of Sanford Whiteman Sent: Thu 1/6/2005 12:40 AM To: Keith Johnson Cc: Subject: Re: [IMail Forum] Nobody vs Rejects > Recently we instituted a policy to not allow nobody aliases, > however, now I have noticed that our Queue will grow out of control. Well, that's backwards. > What I have noticed is a since the nobody alias is gone, there are a > large amount of 'invalid user' rejects happening. That's expected, no? > This server produces between 75K and 100K messages per day. "Produces" as in relays? Delivers locally? Both combined? > Would it be better to NULL the nobody alias and actually black hole > the email vs. having the 'invalid users' rejected? If a reasoned comparison shows that going back to 'nobody' stops the hangs, then it would be, strictly speaking, "better" for your particular case. But there's no way that the technical theory behind envelope-level rejection is inferior to spool-and-delete. There may, it seems, be something in the implementation and/or your envt which is causing a cascading issue. > Just wondering about the Queue Mgr getting overwhelmed with refusal > connections could be causing this issue. QUEUEMGR doesn't handle incoming SMTP connections--that's SMTPD. If QM is hanging, the problem is definitely not _directly_ linked to the envelope rejections. Other questions: - How's SMTP's and QM's CPU? - What userbase are you using? - Are there any errors in the SMTPD logs? --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/re lease/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
<<attachment: winmail.dat>>
