LOL! that's peanuts...... try 70,000 ...yes 70,000 per hour and then tell me about being nailed ... and i didn't have a powerhouse like you...only a 400mhz p2 in otherwords 2.5 million in 24 hours.....
Sheldon ----- Original Message ----- From: "Tom Baker|Netsmith Inc" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, August 21, 2003 6:15 AM Subject: RE: [Declude.JunkMail] Multi Server Configs > Dan, > > Declude does not have that kind of power as it is the IMAIL SMTP Daemon > which accepts the mail and places it into the spool. > After it is in the spool declude queue moves it to the overflow for faster > processing if there are more messages in the spool than imail can run > smtp-delivery processes for (MaxQueProc). See http://www.declude.com/dq.htm > for more information on how exactly the overflow works. > > If you want to reject messages before the SMTP envelope is over let me > suggest you take a look at 'IMGate' http://imgate.meiway.com/ IMGate is > basically a set of configurations for a free Unix OS(Linux or FreeBSD > www.freebsd.org) with the (free) Postfix MTA (www.postfix.org). Postfix does > have the ability for its SMTP Daemon to reject messages during the first > SMTP session based on header and body rules. > > Many of the people running declude also have one of these servers running in > front of our Imail/Declude server to reject such floods. During the start of > the SoBig flood I modified my body checks to reject any message with a .pif > attachment, and modified my header checks to reject any message containing > subject lines of those that the sobig worm uses. > Yesterday I rejected over 10,000 messages based on these rules.. > Thats 10,000 messages declude never had to process because they were > rejected with a "550 code" at the SMTP level. > > There may be some other suggestions on this list, but I think this is > something worth at least taking a look at. > > -Tom > > -----Original Message----- > From: Dan Patnode [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 21, 2003 2:30 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Multi Server Configs > > > I'm running twin dual Xeon 2.4s and was nearly wiped out today by all the > extra virus/worm activity. Its midnight and I'm still clearing out the > overflow, to the tune of 2 dozen Declude processes. > > Rather than running them in parallel as we had before (setting them up with > the same MX weight), we are running these in series (every message hits the > first server until it says uncle, then the second server gets some). > Trouble is, the 1st server didn't refuse incoming mail, it just kept piling > up in overflow - to the tune of about 10,000 message in the course of a > single morning. > > Is there a way to configure Imail/Declude so as not to use overflow, instead > refusing additional connections so they are passed to secondary servers? > > Thanks > Dan > > > PS, more on CPU load itself later > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
