You will be suprised to my response. I can not do a very strict blocking ,because this mail server serve the dial-up customers.
I have only 2 line ,here is the 2 line HELO 20 contains OMMO.NET HELO 20 contains 212.64.200.32 these 2 line is direct delete , OMMO.net is used as helo msg from the biggest spammer in turkey ,this guy sells a cd with a Spam software. each software use ommo.net as hello .So 100% spam the 2nd line no need to comment . I refuse to scan body , it can catch legitime mail. rifat ----- Original Message ----- From: "Colbeck, Andrew" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, July 25, 2003 8:24 PM Subject: RE: [Declude.JunkMail] Declude using 50% cpu Rifat, since you have the Pro version of JunkMail, how much text filtering do you do? Kami and I both do quite a bit... I just counted, and in various separate text filter files, i have 3500 BODY tests. Andrew. -----Original Message----- From: Rifat Levis [mailto:[EMAIL PROTECTED] Sent: Thursday, July 24, 2003 5:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude using 50% cpu I am running single P3 1.0 Ghz with 2 scsi HD 1st Drive OS 2nd Drive Imail. Win2k , Sp4 , Imail 8.x with latest patches. Declude JunkPro , Virus with f-prot. ver 1.75 Webmail+pop3+smtp+imap4+DNS server Processor usage around 30% ,40% I didnt made any stats about the email volume , but more than 15.000 user are using it. Working without any problem :) The server bandwith usage is around 1Mbit/sec I will upgrade it someday ,not in hurry If it is working fine with me , there should be some other kind of problems. The cpu usage ,is heavy for DNS ,Webmail and other services but not for declude. Regards Rifat Levis ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, July 25, 2003 2:57 AM Subject: RE: [Declude.JunkMail] Declude using 50% cpu >This server is slammed during buisness hours but it was making due with >dual 933, declude just kills it. What portion of custom filters vs rdns >checks should I look at to reduce this processing strain? A dual 933 should be able to process at about 200,000 E-mails/day complete with virus and spam scanning. At 27,000 E-mails/day, even if they were crammed into just 4 hours (27,000 in 4 hours, with none being sent in the other 20 hours), the server should still be able to handle it. In your case, I would suggest trying v1.65 (from http://www.declude.com/release/165/declude.exe ) -- you can just replace the \IMail\Declude.exe file, without making any configuration file changes. There were a couple reports of high CPU usage since 1.65, but nothing that turned out to be a definable problem. If the high CPU usage occurs on 1.75 but not 1.65, that would provide some big clues as to what is happening. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
