[Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
We've running W2k3 Server on a Dell PE1750 with 3GHz Dual-Xeon CPU and SCSI-Raid system here. Sometimes the proc folder is filling up with thousands of messages and declude is processing it. But it does process them way to slow. While all 4 CPU-Usage graphs in the task manager has an average

RE: [Declude.JunkMail] SpamReview / HoldAnalyzer

2006-01-13 Thread Dave Beckstrom
I was wondering what the status is on the spam review tool for smartermail users? -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, December 06, 2005 12:22 AM To: Declude.JunkMail@declude.com Subject:

[Declude.JunkMail] Spam leak?

2006-01-13 Thread Dave Doherty
Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing

Re: [Declude.JunkMail] Spam leak?

2006-01-13 Thread Chuck Cahill
Something like this, which was received from X-Note: Sent with HELO [declude.com] from Reverse DNS [mail.declude.com] From: Mireille Wood [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Gteat holidays? MIME-Version: 1.0 Date: Fri, 13 Jan 2006 06:43:27 +0700 Content-Type: text/html;

RE: [Declude.JunkMail] Spam leak?

2006-01-13 Thread Harry Vanderzand
Yes, I did Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Friday, January 13, 2006 8:48 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Spam

RE: [Declude.JunkMail] Spam leak?

2006-01-13 Thread Markus Gufler
Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? Yes. Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To

RE: [Declude.JunkMail] Spam leak?

2006-01-13 Thread David Barker
We are aware of this it was a forged email posting to our list, we have disabled all posting on the customer list until we need to post. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Friday, January 13, 2006

Re: [Declude.JunkMail] Spam leak?

2006-01-13 Thread smb
Yep I did also. Stu At 08:47 AM 1/13/2006 -0500, you wrote: Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA

Re: [Declude.JunkMail] Spam leak?

2006-01-13 Thread Kim Premuda
Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? Yes, we did. -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Barker
I have worked with customers with similar Dual-Xeon CPU setup and have seen processing of 1000+ emails per minute. 1. What is your THREADS in the Declude.cfg ? 2. Are you running many large filters ? 3. How many virus scanners are you running ? 4. Is hyperthreading turned ON or OFF ? 5. Are you

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
I have worked with customers with similar Dual-Xeon CPU setup and have seen processing of 1000+ emails per minute. We have two of this machines here. It has exactly the same config from the screw who hold the server in the rack up to each dot in the junkmail config file (except the license

Re: [Declude.JunkMail] Spam leak?

2006-01-13 Thread Jeff Kratka
Yes I recived it also. Jeff Kratka On 1/13/2006, Dave Doherty [EMAIL PROTECTED] wrote: Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Barker
1. Set THREADS 200 2. Which virus scanner are you running ? and do you have PRESCAN ON in your virus.cfg 3. Try turning hyperthreading off. 4. Set WAITFORMAIL 500 5. Have you had DNS issues with decludeproc running ? Disable WINSOCKCLEANUP ON 6. Disable WAITFORTHREADS and WAITBETWEENTHREADS Let

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Harry Vanderzand
I have a similar machine, generally running well My declude.cfg is: threads 75 waitformail 0 waitforthreads 25 waitbetweenthreads 100 winsockcleanup off Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Darrell \([EMAIL PROTECTED])
Markus, I would try the DNSOVERRIDE x.x.x.x switch in your declude.cfg file. There is a post in the archive from Declude - Bill I beleive that explains more. The scenario you are describing is exactly the same issue I seen a time before and the DNSOVERRIDE fixed it. Darrell Markus

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
1. Set THREADS 200 Ok set to 200 2. Which virus scanner are you running ? and do you have F-Prot and optionaly McAfee PRESCAN ON in your virus.cfg Yes it was already set to ON 3. Try turning hyperthreading off. Hmm the server is around 40 km away. As I know HAT is enabled/disabled in

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
I would try the DNSOVERRIDE x.x.x.x switch in your declude.cfg file. There is a post in the archive from Declude - Bill I beleive that explains more. Can't find any message from Bill Added DNSOVERRIDE without any result Markus --- [This E-mail was scanned for viruses by Declude EVA

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Barker
1. How many messages currently in your \proc ? 2. On average how many threads has decludeproc and what is the highest thread count over a 5 min period check this under your processors, also set the update speed under the view to high David B www.declude.com -Original Message- From:

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Matt
Quick comment about turning hyperthreading off. I posted a graph from sometime in the last two weeks where I tested this with 2.0.6.16 and it showed that this effectively doubled my CPU utilization. I understand that 3.x is different, but it still launches a lot of processes such as external

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Barker
FYI Hyperthreading http://news.zdnet.co.uk/0,39020330,39237341,00.htm Intel had sold hyperthreading as something that gave performance gains to heavily threaded software. SQL Server is very thread-intensive, but it suffers. In fact, I've never seen performance improvement on server software with

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Barker
Declude.cfg should be in your \Declude folder, is that where it is located ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Friday, January 13, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: RE:

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
1. How many messages currently in your \proc ? SRV1 is gone below 1000 SRV2 is still somewhere between 4000 and 6000 messages (going up and down slowly) 2. On average how many threads has decludeproc and what is the highest thread count over a 5 min period check this under your

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Darrell \([EMAIL PROTECTED])
Markus, Sorry it was Ralph - http://www.mail-archive.com/declude.junkmail@declude.com/msg24658.html Note it says 2.0.6, but I had to use it under 3.x as well. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail,

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Matt
That might even be the very article that made me decide to try testing it off. There is no doubt that this more than doubled my CPU utilization. This extreme is also why I have doubts about whether there was something else going on that caused the issues that I saw. The part that makes

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
But after Darells suggestion I noticed another difference between both servers. SRV1 and SRV2 has configured two different DNS servers for lookups (even without DNSOVERERIDE) After disabling all DNS-based tests CPU usage seems going up to an average of 90% but only for certain periods

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Bill Green dfn Systems
Marcus, Are you running DNS on the Mail Server, or does it point to another machine? If running locally, you might want to try pointing DNSOVERRIDE to a different dns server. Bill Green dfn Systems - Original Message - From: Markus Gufler [EMAIL PROTECTED] To:

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
Declude.cfg should be in your \Declude folder, is that where it is located ? Hmm strange. It was there and also in the c:\program files\declude folder where it was after the initial installation. Now I've deleted and recreated the declude.cfg file in the declude folder and restarted the

[Declude.JunkMail] Sniffer weighting

2006-01-13 Thread Goran Jovanovic
Hi, Does anyone have a good list of all the SNIFFER categories and different weights for them that they would like to share? Thanks Goran Jovanovic Omega Network Solutions

RE: Re[2]: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Barker
25% utilization under NO load is very strange. Could you provide us with Remote Access to see this ? David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Sullivan Sent: Friday, January 13, 2006 1:28 PM To: Matt Subject: Re[2]:

Re[2]: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Sullivan
Hello Matt, Friday, January 13, 2006, 12:29:25 PM, you wrote: M I would throw both logs into Debug and restart just to see if M there areany clues in there.  Did this and couldn't come up with anything out of ordinary. M One other longshot that would be interesting would be to change M

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Nick Hayer
Matt wrote: I'm sure that Nick will volunteer to have his server monitored by me so that I can test this out on another box. I believe that he is also on 2.0.6.16 as well. sure and I am. Off list we need to discuss - -Nick Matt David Barker wrote: FYI Hyperthreading

Re: Re[2]: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Bill Landry
We are running Declude Version 3.0.5.23 with JunkMail and Virus Pro on two dual-proc servers and are not seeing this. I often see the CPU at zero when no mail is being processes. Bill - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Matt Declude.JunkMail@declude.com

Re: [Declude.JunkMail] Declude 3.5.23 CPU usage under no load

2006-01-13 Thread Matt
David Sullivan wrote: M One other longshot that would be interesting would be to change M thedefault host in IMail to match the other box and use the keys on M theproperly functioning server just to see if there is any M difference. Good idea, we'll give this a shot. What about the 25%

RE: [Declude.JunkMail] Sniffer weighting

2006-01-13 Thread John T \(Lists\)
SNIFFER-TRAVEL external 047 C:\Imail\Sniffer\yourlicensecode.exe yourverificationcode 15 0 SNIFFER-INSURANCE external 048 C:\Imail\Sniffer\yourlicensecode.exe yourverificationcode 15 0 SNIFFER-AV-PUSH external 049 C:\Imail\Sniffer\yourlicensecode.exe yourverificationcode 15 0

RE: [Declude.JunkMail] Sniffer weighting

2006-01-13 Thread Markus Gufler
SNIFFER-TRAVELexternal047"C:\IMail\declude\sniffer\yourlicensecode.exe yourverificationcode"850SNIFFER-INSURexternal048"C:\IMail\declude\sniffer\yourlicensecode.exe yourverificationcode"850SNIFFER-AVexternal049"C:\IMail\declude\sniffer\yourlicensecode.exe

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Markus Gufler
My conclusion for this day: At the mid of december I decided to switch to declude v3. After several tests we discovered that a simply comment after the license code like CODE abcdefg #mail.domain.com wouldn't work anymore with v3. This would result in a "invalid license code" message

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Nick Hayer
Markus Gufler wrote: My conclusion for this day: Normaly I should stay in bed today as I'm more ill then healthy. Agreed! We need you Markus so get well! -Nick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Friday, January

AHBL:Re[2]: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread David Sullivan
Hello Matt, Friday, January 13, 2006, 2:04:00 PM, you wrote: M Great news.  Now Declude can look for a bug in how it handles M certainlicense codes and maybe fix this for others.  Maybe Markus M could trythe same thing. Ok, I'm not sure why the license code change worked at all. Been on with

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

2006-01-13 Thread Matt
I suppose that it makes sense to not set WAITFORMAIL to 0, though Harry posted this morning that his was set that way and working properly. Personally I would be curious to see what happens if you set it back to 0 and restarted the service sine the other testing didn't seem to make sense if

Re[2]: [Declude.JunkMail] OT: MaxDSNSize

2006-01-13 Thread Sanford Whiteman
I have not yet tested out any changes to the threads. It seems that people don't want to discuss it. Oh, I'll discuss it. . . but I don't really don't know why the burden of proof fell my way, rather than this stuff being investigated _before_ declaring without real testing that MS