On Thu, 2004-07-29 at 10:06, Steve Dimoff wrote:

> We process the following messages usually a day:
> 
> Statistics by Hour
> ----------------------------------------------------
> Hour                          Spam               Ham
> -------------    -----------------    --------------
> 2004-07-28 00          1595 ( 87%)        234 ( 12%)
> 2004-07-28 01          1818 ( 83%)        356 ( 16%)
> 2004-07-28 02          1279 ( 79%)        326 ( 20%)
> 2004-07-28 03          1693 ( 88%)        230 ( 11%)
> 2004-07-28 04          1840 ( 80%)        455 ( 19%)
> 2004-07-28 05          1394 ( 84%)        264 ( 15%)
> 2004-07-28 06          1591 ( 87%)        236 ( 12%)
> 2004-07-28 07          2136 ( 88%)        284 ( 11%)
> 2004-07-28 08          1541 ( 71%)        612 ( 28%)
> 2004-07-28 09          1507 ( 57%)       1109 ( 42%)
> 2004-07-28 10          1611 ( 70%)        673 ( 29%)
> 2004-07-28 11           581 ( 68%)        272 ( 31%)
> 2004-07-28 12          1343 ( 66%)        685 ( 33%)
> 2004-07-28 13          2106 ( 68%)        962 ( 31%)
> 2004-07-28 14          1644 ( 73%)        596 ( 26%)
> 2004-07-28 15          1411 ( 61%)        898 ( 38%)
> 2004-07-28 16          1820 ( 72%)        693 ( 27%)
> 2004-07-28 17          1411 ( 75%)        464 ( 24%)
> 2004-07-28 18          1491 ( 81%)        342 ( 18%)
> 2004-07-28 19          1296 ( 73%)        457 ( 26%)
> 2004-07-28 20          1116 ( 75%)        372 ( 25%)
> 2004-07-28 21          1461 ( 77%)        426 ( 22%)
> 2004-07-28 22          1286 ( 78%)        345 ( 21%)
> 2004-07-28 23          1325 ( 79%)        344 ( 20%)     
> 
> Around the times where we get flooded and receive around 2000+ messages an
> hour the system goes into a meltdown.  
> 
> SPAMD is taking up most of the processes.  The system stops accepting new
> mail connections. Once it's processed what's in Qmail's connection then it
> starts to accept until it's full again.

One option you should consider is implementing greylisting.  Not sure
what is available to use with Qmail.  I used milter-greylist with my
sendmail configuration and have managed to knock spam down to literally
a handful a day.  With your volume you can probably knock the spam you
process with spamassassin down to a 100 or so per day.  

And I have found that setting a relatively small timeout (a couple of
minutes) works just fine.  I have seen virtually no difference to that
or using 30 minutes.

The combination of greylisting and spamassassin has worked wonders.
-- 
Scot L. Harris
[EMAIL PROTECTED]

I'll meet you... on the dark side of the moon...
                -- Pink Floyd 

Reply via email to