Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-07 Thread Joshua Zukerman
I disabled the baysian filter and autolearn to see if that would help. I also checked the smtp logs again, and I'm still seeing entries like this: 2006-11-07 11:57:13.124734500 CHKUSER accepted rcpt: from [EMAIL PROTECTED]:: remote dom1:unknown:83.6.253.146 rcpt [EMAIL PROTECTED] : found

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-07 Thread Steve Huff
On Nov 7, 2006, at 1:30 PM, Joshua Zukerman wrote: None of those accounts exist, yet it says found existing recipient ? I don't understand that part. do you have a catchall account defined? look in qmailadmin to find out. you may want to configure your domains to drop (not bounce) messages

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-07 Thread Joshua Zukerman
I meant to say in my original e-mail that the catchall was set to delete. I set that up again just to be sure. Josh On 11/7/06, Steve Huff [EMAIL PROTECTED] wrote: On Nov 7, 2006, at 1:30 PM, Joshua Zukerman wrote: None of those accounts exist, yet it says found existing recipient ? I

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-06 Thread Joshua Zukerman
I use a pretty much stock qmailtoaster install. I believe the only customizations were the RBLs and my spamassassin configuration file. Here it is: # How many hits before a message is considered spam. required_score 5.0 # Change the subject of suspected spam rewrite_header subject

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-06 Thread Eric \Shubes\
That looks/sounds ok to me. Is your network connection jammed when you have these unresponsive episodes? I'm not familiar with the the mrtg data, but do you see anything there that coincides with the episodes? Joshua Zukerman wrote: I use a pretty much stock qmailtoaster install. I believe

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-06 Thread Eric \Shubes\
Like I said, I don't know mrtg, but what makes you doubt its accuracy? Joshua Zukerman wrote: MRTG (on the network interface) sometimes shows some peaks of traffic, like 300kbit, nothing too serious. qmailmrtg notes quite a bunch of smtp connections but I think it isn't too accurate. On

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-06 Thread Joshua Zukerman
Well, I can post what qmailtoaster mrtg is curently showing: concurrency: http://i13.tinypic.com/436j4uf.png messages: http://i13.tinypic.com/2cr0hz8.png smtp: http://i14.tinypic.com/40mbodi.png smtp allow/deny: http://i13.tinypic.com/2yw7olx.png spamd: http://i13.tinypic.com/2eocutk.png On

[qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-05 Thread Joshua Zukerman
I forgot to mention the blacklists I use: -rrelays.ordb.org -rsbl-xbl.spamhaus.org -rbl.spamcop.net -rlist.dsbl.org -rdnsbl.njabl.org -rdun.dnsrbl.net I think these are all working, last time I checked. Could slow dns queries be causing my issues? On 11/5/06, Joshua Zukerman [EMAIL PROTECTED]

Re: [qmailtoaster] Re: Issues with spam causing high load and unresponsive server

2006-11-05 Thread Eric \Shubes\
Also, are you seeing smtp sessions end after 300 or 600 seconds with status 256? Do you see any errors in the spamd log? Does spamd ever max out the cpu for a period of time? Erik Espinoza wrote: rblsmtpd doesn't take up very many resources. This is probably due to spamassassin or clamav, You