It's better to have two filters, one for MAILFROM and one HELO rather
than searching HEADERS for the same string. The trick is that when
matching MAILFROM or HELO, you are only matching one short string
instead of ~1K of text contained within the headers.
If you are looking to save on processing power, it is best to have
filters split into different files according to what they are used for.
You can use some of the beta features from 1.79 to set a SKIPIFWEIGHT so
that the filter rarely runs, and you can also set a MAXWEIGHT so that
the filter will stop processing after a single hit (when you score the
filter internally instead of within the global.cfg). With things like
MAILFROM, REVDNS and HELO filters, you aren't likely to save much
processing this with MAXWEIGHT, but it is definitely better to do so.
SKIPIFWEIGHT however can save you from processing the filter +70% of the
time on a well tuned system and the effect can be very noticeable on
large BODY filters.
Regarding loading the files, I have about 80 or so individual filters
that must get loaded every time Declude runs. Apparently Windows is
efficient enough that these files are almost always present in memory
and therefore don't need to be read from the disk, so the effect of
having multiple files is rather small and should be of no concern unless
you are pushing the limits of your server (when the 5-minute averages
start peaking at around 50%). If you are no where near that point,
don't give it a thought, if you are at that point, there are multitudes
of things to do, and you should keep in mind that most virus scanners
are many times more processor intensive than a rather hefty JunkMail
config, and attention should be focused there first.
Matt
Glenn Brooks wrote:
Also along this line of questions, my main filters are mailfrom and
helo AND I also
am starting to collect a large number of files. Each filter file as
approx. 1500 lines.
So my question is the same as asked previous (listed below) but also,
would it be better to simply use headers filter versus mailfrom and
helo.or does it not matter?
thanks in advance
gb
At 08:37 PM 7/19/2004 -0400, you wrote:
I am wondering what works better for other operators? To use 10 or 12
smaller txt filter files, or 2 or 3 larger ones?
It seems that more smaller ones are easier to manage using
categories. But
what uses less CPU/Memory usage?
Which way is faster?
Thanks
Robert
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Glenn Brooks
WebWize, Inc.
713-682-7111
http://www.webwize.com
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
