Hi Paul:

It's hard to measure the actual impact, as this machine serves a few
functions.  However, my unscientific observation has been, that two other
applications on that machine are gobbling up most of its CPU use.  

Declude's use is noticeable - but minor - and seems to be mostly for Declude
Virus launching the virus scanner.  Also, keep in mind that in later Declude
versions Scott had optimized the DNS queries that are directed against the
SAME dnsbl server.

My logic is - if it helps holding or deleting 10 or more percent of messages
then I would just have to provide whatever hardware resources are necessary
to run the additional test to save money at every desktop.

If you are trying to ecnomize I would drop AHBL and then NJABL and only keep
SORBS.  However, I found that the  AHBLSOURCES and NJABLSOURCES are pretty
reliable, so I give them a high weight - where the SORBS-SOURCES test was
eliminated because it's mostly false positives.

Best Regards
Andy Schmidt

H&M Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:    +1 201 934-9206

http://www.HM-Software.com/


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of paul
Sent: Monday, December 01, 2003 11:52 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] EASYNET tests going away December 1


Andy,
    You have all of these tests running? What's the impact on the server for
all of these? What's your mail load? I just love having to replace all these
tests every month or so, don't we all? LOL! But I want to lessen the impact
on our server as much as possible. What of these tests do you recommend the
most?

Paul


>
> Hi,
>
> Yesterday's results of my EasyNet replacement candidates:
>
> TEST             # FAILED   Percentage
>
> AHBLDOMAINS............71........0.95%
> AHBLPROXIES...........735........9.82%
> AHBLSOURCES...........351........4.69% (reliable, so far)
>
> NJABLDUL..............274........3.66% (many duplicates with 
> SORBS-DUL) NJABLPROXIES........1,085.......14.49%
> NJABLRELAYS...........118........1.58%
> NJABLSOURCES..........265........3.54% (reliable, so far)
>
> SORBS-DUL...........2,664.......35.58%
> SORBS-HTTP............737........9.84% (proxies) 
> SORBS-MISC.............80........1.07% (proxies) 
> SORBS-SOCKS...........873.......11.66% (proxies) 
> SORBS-SMTP..............5........0.07%
> SORBS-ZOMBIE...........30........0.40%
>
> A) Do NOT use SORBS-SPAM.  As they point out on their web site, it has
been
> infested with the mail servers of most major providers by the simple 
> fact that virus-infected customer systems have been sending arbitrary 
> emails, implicating the mail sever of the provider.  I tested it for 
> two days and kept lowering the weight until I realized that it was not 
> at all helpful
in
> trying to distinguish spam from legitimate mail.
>
> B) I have been holding and/or deleting ANYTHING "proxy" for many weeks 
> now and so far never had any customer complaints about "lost" emails.
>
> Best Regards
> Andy Schmidt

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to