RE: [Declude.JunkMail] "ldeliver" interpretation
Katie, If you want the fully loaded mail / recipient count on the incomings try find " RCPT TO:" sys.txt /C /I George > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. > Scott Perry > Sent: Wednesday, November 12, 2003 6:39 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] "ldeliver" interpretation > > > > >Okay, so is there a way I can get a count before scanning by Declude? > > One option would be to count HELO and EHLO's, such as: > > find " HELO " sys.txt /c > find " EHLO " sys.txt /c > > and add them. The drawback to this is that it will also include > non-delivered E-mail (for example, someone doing a dictionary > attack), and > groups incoming/outgoing together. > > Alternatively, you could add the number of ldeliver/rdelivers > to the number > of E-mails held/deleted. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day > evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] "ldeliver" interpretation
Okay, so is there a way I can get a count before scanning by Declude? One option would be to count HELO and EHLO's, such as: find " HELO " sys.txt /c find " EHLO " sys.txt /c and add them. The drawback to this is that it will also include non-delivered E-mail (for example, someone doing a dictionary attack), and groups incoming/outgoing together. Alternatively, you could add the number of ldeliver/rdelivers to the number of E-mails held/deleted. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] "ldeliver" interpretation
Okay, so is there a way I can get a count before scanning by Declude? I want concrete data to take to a meeting where we will evaluate if a new machine or upgrade is necessary. CPU usage has been very high with smtp and Declude being the biggest users. The machine is 400mhz w/ 384mb ram. CPU average this afternoon has been 68% but hangs at 100% for long periods at a time. Ldeliver count for yesterday was 20,699 and rdeliver was 3,725. As always, I appreciate your help. Thanks, Katie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, November 12, 2003 3:23 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] "ldeliver" interpretation >If, when I run find "ldeliver" sys.txt /c, I get 20,699 is that the >number of messages that Imail is receiving before Declude Junkmail Pro >scans our incoming mail or after? After. So if Declude JunkMail deletes/quarantines any E-mail, it will not be included in the count. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] "ldeliver" interpretation
If, when I run find "ldeliver" sys.txt /c, I get 20,699 is that the number of messages that Imail is receiving before Declude Junkmail Pro scans our incoming mail or after? After. So if Declude JunkMail deletes/quarantines any E-mail, it will not be included in the count. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
