The following recipient(s) could not be reached: Spamassassin-Users ([EMAIL PROTECTED]) on 7/29/2004 10:23 AM Unable to deliver the message due to a communications failure
Let me try my Reply again...... --------------------------------------------- None, I've been scared to add more rules due to what is happening now. Here is my local.cf file also: required_hits 5.2 rewrite_subject 0 subject_tag [**SPAM**] use_bayes 1 use_terse_report 1 report_safe 0 use_dcc 0 use_pyzor 0 use_razor2 1 skip_rbl_checks 0 rbl_timeout 3 num_check_received 3 dns_available yes -----Original Message----- From: Martin Hepworth [mailto:[EMAIL PROTECTED] Sent: Thursday, July 29, 2004 10:30 AM To: Steve Dimoff Cc: Spamassassin-Users ([EMAIL PROTECTED]) Subject: Re: HELP! Performance Issues with Spamassassin Steve what rules are u running over the 'standard' 2.63 ?? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Steve Dimoff wrote: > Hello, > > I'm using SA 2.63 with qmail, Qmail-Scanner 1.22 and clamAV 0.72 > > System Info: RH 7.3 > > CPU: > > processor : 0 > vendor_id : GenuineIntel > cpu family : 15 > model : 2 > model name : Intel(R) Pentium(R) 4 CPU 2.40GHz > stepping : 9 > cpu MHz : 2400.186 > cache size : 512 KB > fdiv_bug : no > hlt_bug : no > f00f_bug : no > coma_bug : no > fpu : yes > fpu_exception : yes > cpuid level : 2 > wp : yes > flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca > cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm > bogomips : 4784.12 > > > Memory: > Mem: 514324K av, 426548K used, 87776K free, > Swap: 1044216K av, 70680K used, 973536K free > > We process the following messages usually a day: > > Statistics by Hour > ---------------------------------------------------- > Hour Spam Ham > ------------- ----------------- -------------- > 2004-07-28 00 1595 ( 87%) 234 ( 12%) > 2004-07-28 01 1818 ( 83%) 356 ( 16%) > 2004-07-28 02 1279 ( 79%) 326 ( 20%) > 2004-07-28 03 1693 ( 88%) 230 ( 11%) > 2004-07-28 04 1840 ( 80%) 455 ( 19%) > 2004-07-28 05 1394 ( 84%) 264 ( 15%) > 2004-07-28 06 1591 ( 87%) 236 ( 12%) > 2004-07-28 07 2136 ( 88%) 284 ( 11%) > 2004-07-28 08 1541 ( 71%) 612 ( 28%) > 2004-07-28 09 1507 ( 57%) 1109 ( 42%) > 2004-07-28 10 1611 ( 70%) 673 ( 29%) > 2004-07-28 11 581 ( 68%) 272 ( 31%) > 2004-07-28 12 1343 ( 66%) 685 ( 33%) > 2004-07-28 13 2106 ( 68%) 962 ( 31%) > 2004-07-28 14 1644 ( 73%) 596 ( 26%) > 2004-07-28 15 1411 ( 61%) 898 ( 38%) > 2004-07-28 16 1820 ( 72%) 693 ( 27%) > 2004-07-28 17 1411 ( 75%) 464 ( 24%) > 2004-07-28 18 1491 ( 81%) 342 ( 18%) > 2004-07-28 19 1296 ( 73%) 457 ( 26%) > 2004-07-28 20 1116 ( 75%) 372 ( 25%) > 2004-07-28 21 1461 ( 77%) 426 ( 22%) > 2004-07-28 22 1286 ( 78%) 345 ( 21%) > 2004-07-28 23 1325 ( 79%) 344 ( 20%) > > Around the times where we get flooded and receive around 2000+ messages an > hour the system goes into a meltdown. > > SPAMD is taking up most of the processes. The system stops accepting new > mail connections. Once it's processed what's in Qmail's connection then it > starts to accept until it's full again. > > Here is my RUN scipt for qmail > > #!/bin/sh > QMAILDUID=`id -u qmaild` > NOFILESGID=`id -g qmaild` > # when QMAILQUEUE is set, all mail will be sent to the nominated script > QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl" export QMAILQUEUE > > exec /usr/local/bin/softlimit -m 30000000 \ > /usr/local/bin/tcpserver \ > -H -l systemname_removed \ > -v -x /etc/tcp.smtp.cdb \ > -c 35 -R -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \ > /usr/local/bin/fixcrio \ > /usr/local/bin/rblsmtpd -b -C \ > -r 'relays.ordb.org:Your message was rejected because the mail server you > use is configured to allow OPEN RELAY - More detailed in > formation regarding this problem is available from > http://www.ordb.org/lookup/?%IP% - Please forward this error through to your > emai > l server support staff for easy resolution.' \ > -t 5 \ > /var/qmail/bin/qmail-smtpd 2>&1 > > > When this flood comes it starts taking longer to process the mail. > > 630.7 seconds is the highest I've seen, I'm sure there is a higher number in > there though. > > We do have 2 systems setup. The 2nd is a Sun E250 2x400 with 2 GIG mem. The > same thing happens to this system when we receive a "SPAM Flood". > > Is there anything I can check or change to make it process faster when a lot > of mail is hitting the server? > > Thanks! > Steve > > ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. **********************************************************************
