Bill Martin wrote: > About 6 months ago, I inherited a number of servers and process and do > not have the time to really focus on the true ins and out of what was > given to me. Given that I'm really hoping someone can point me in the > right direction... > > About every 3-5 weeks, we get hammered to the point where out gateways > are backlogging over 10,000 across 3, sometimes 4 servers. This includes > one server in which BIND is running (wanted to determine some time back > if the issue was DNS). > > SA times are high on most e-mails.
How high? What are some of the amavis TIMING results during the backlogs ? > No local logging is taking place due > to the disk IO which we thought might have been the issue. We have had > this issue regardless of the version of Amavisd we have run, regardless > of the version of SA, ClamAV and Postfix we have used. We have over time > changed the max_server to try and address and this simply consumes more CPU. > > The only items that I see which have been consistent it the general > process, DNS and out pipe the net. How have you measured this? What results do you see ? > > Now before someone suggest I refer to the docs to address performance > issues, I have, on various occasions . . . also Goggle, bought books, > etc... Well, I'm going to still ask if you've evaluated the tips in: http://www.ijs.si/software/amavisd/README.performance.txt > > If someone could eyeball the config below and let me know if you see any > concerns or areas that might need to be reconsidered, I would greatly > appreciate it.... Not much to comment on... > > 1. Running and various versions of RHEL (4 and 5) ok. > 2. Blocking nearly 5000 hosts and class C and B via IPtables That's a lot of if/then/else's per packet. > 3. Various postfix header, sender, and body restrictions (not problem is not > at the PF level from what I can determine) ok. > 4. All processes run in a chroot environment not relevant most likely > 5. Although some of the processes are older, we have had this issue > regardless of versions (we will be upgrading in the next few days, > Amavisd, PF, SA, and ClamAV). > > I can send a copy of the amavisd.conf if needed... I think more important than the conf is data from which to draw some conclusions or inferences. Let's see some real measurements and data. MrC > > Once again, any help would be greatly appreciated > -bill- ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
