> Hi All
>
> We are running Postfix + amavisd-new-2.3.3-3 in our linux mail gateway.
> We have been hit hard lately with SPAM and our mail queue has been
> growing significantly to 10,000+ mails and it takes a few hours for the
> queue to go down. We received 1.6million spam messages last month and I
> believe this number is growing at around 5-10% monthly.
>
> We were hit with 65k spam messages between the 6 hours between 00:00am
> 06:00am this morning, by the time business starts, the mail queue was
> already soaring up to around 19k around 9am. I was watching the mail
> queue growth, the throughput of incoming mail -> postfix -> amavis
> (spamassassin only) -> postfix -> relay to internal hosts, was only 1-2
> messages per second.
>
> Our configuration in postfix and amavisd are as follow, the server has
> 1.5G memory with SCSI disks (Raid 5) and 2 x 2.x Xeon processor - we
> feel the server has a decent profile and *should* cope with the
> requirement.
>
> We fiddled with the max proc for smtp-amavis below from 25, 50, 100 (and
> also change max_servers variable in amavisd.conf accordingly) but the
> rate/second throughput hardly changed during these periods.
>
> Would anyone be able to share some lights on our issue? please let us
> know if you require more information from our settings.
>
> Thanks
>
> CP
>
>
> master.cf
> ---------
> smtp inet n - - - 100 smtpd
>
> smtp-amavis unix - - y - 25 lmtp
> -o smtp_data_done_timeout=1200
> -o disable_dns_lookups=yes
>
> 127.0.0.1:10025 inet n - y - 200 smtpd
> -o content_filter=
> -o local_recipient_maps=
> -o relay_recipient_maps=
> -o smtpd_restriction_classes=
> -o smtpd_client_restrictions=
> -o smtpd_helo_restrictions=
> -o smtpd_sender_restrictions=
> -o smtpd_recipient_restrictions=permit_mynetworks,reject
> -o mynetworks=127.0.0.0/8
> -o strict_rfc821_envelopes=yes
>
> recipient_access table
> ----------------------
> .mydomain.com FILTER smtp-amavis:[127.0.0.1]:10024
>
> amavisd.conf
> ------------
> $max_servers = 25; # number of pre-forked children
> $max_requests = 20; # retire a child after that many accepts
>
>
Hi,
Are you using any reject_rbl_client directives in your main.cf ?
This could reduce SPAM levels drastically.
This is what I'm using in smtpd_recipient_restrictions:
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
check_recipient_access regexp:/etc/postfix/mailboxfull,
reject_invalid_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client cbl.abuseat.org,
reject_rbl_client safe.dnsbl.sorbs.net,
reject_rbl_client list.dsbl.org,
check_client_access hash:/etc/postfix/client_checks,
check_sender_access regexp:/etc/postfix/filter-catchall.regexp,
permit
Best Regards,
Leon Kolchinsky
-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
