Could be...obviously you need to start looking at your spool directly, volume of mail being sent, and log files. You should probably check your relay settings, and check your server for any hacks...especially if you're not behind a firewall, or have other ports than mail open.
Darin. ----- Original Message ----- From: "Richard Farris" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 10, 2004 12:19 PM Subject: Re: [Declude.JunkMail] 100% CPU Could this be why my server was running 100%...maybe someone took it over and was sending junk out...This all started Tuesday nite..and it says I have been listed for 3 days.. Richard Farris Ethixs Online 1.270.247.5555 Office 1.800.548.3877 Tech Support "Crossroads to a Cleaner Internet" ----- Original Message ----- From: "Darin Cox" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 10, 2004 11:05 AM Subject: Re: [Declude.JunkMail] 100% CPU > Contact SpamCop... > > http://www.spamcop.net/fom-serve/cache/75.html > > > Darin. > > > ----- Original Message ----- > From: "Richard Farris" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, September 10, 2004 11:54 AM > Subject: Re: [Declude.JunkMail] 100% CPU > > > I see I have been blacklisted in spamcop.net...What do I do...Nothing could > be further from the truth of us sending spam.. > > > > > In an effort to reduce the amount of SPAM that enters this site. > > > > Your E-mail to :"Richard Farris" <[EMAIL PROTECTED]> with the subject of > :SPAMWARNING spam > > Was marked as SPAM and was not delvered. > > > > > > The reason for your E-mail to be mark was : > > > > smtp server is listed at bl.spamcop.net > > > > > > Please see the above souces to have your E-mail server removed from their > black list. > > > > > > > > Scanning software was supplied free from....... > > Martijn Jongen > > www.martinjongen.com/orfilter > > > > Thank you !!!!!! > > > > > > > > Patrick C. Schafer > > Aerolite Extrusion Co > > Richard Farris > Ethixs Online > 1.270.247.5555 Office > 1.800.548.3877 Tech Support > "Crossroads to a Cleaner Internet" > > ----- Original Message ----- > From: "Richard Farris" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, September 08, 2004 8:22 PM > Subject: Re: [Declude.JunkMail] 100% CPU > > > > I see from previous messages it is a good idea to use SKIPIFWEIGHT > > Where do I put this and what is a good number to put in there.. > > I hold at 9 and delete at 18... > > > > How can you tell if you are under a dictionary attack...thru the routers? > > > > Richard Farris > > Ethixs Online > > 1.270.247.5555 Office > > 1.800.548.3877 Tech Support > > "Crossroads to a Cleaner Internet" > > > > ----- Original Message ----- > > From: "Darin Cox" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Wednesday, September 08, 2004 8:03 PM > > Subject: Re: [Declude.JunkMail] 100% CPU > > > > > > > What processes are using the most CPU? > > > What's are the message counts in your IMail spool? > > > Are you perhaps experiencing dictionary attacks? > > > > > > Darin. > > > > > > > > > ----- Original Message ----- > > > From: "Richard Farris" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Sent: Wednesday, September 08, 2004 8:44 PM > > > Subject: [Declude.JunkMail] 100% CPU > > > > > > > > > Over the last 24 hrs it seems my server has been working overtime > > processing > > > messages...I was at constant 100%...I tried downloading the latest > interim > > > 1.79i16 and that didn't help...I turned off and reloaded Sortomonster > > files > > > and that didnt help....I took out all my IMAIL rules (rules.ima) which > had > > a > > > lot of Body rules (about 40) and that helped tremendously....so I guess > I > > > will leave them out..however it does seem to still be pegging 100% quite > a > > > bit.. > > > > > > I guess my question is why all of a sudden without changing anything did > > my > > > NT server peg out...I had not updated my rules.ima in a while...and how > > can > > > I see what is taking so much resources...The task manager moves so fast > I > > > cant see what is what...I do see a lot of Declude running but I think > that > > > is normal? > > > > > > Any hints to where I could look to get back more resources would be > > > appreciated.. > > > > > > Richard Farris > > > Ethixs Online > > > 1.270.247.5555 Office > > > 1.800.548.3877 Tech Support > > > "Crossroads to a Cleaner Internet" > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
