These figures are pulled from the Imail daily report.
Without Declude Junkmail this month: SpamContent 12272 SpamPhrase 16150 SpamFeatures 831 SpamUrlDomain 31755 LocalDeliver 90728 RemoteDeliver 12614
With Declude Junkmail in December: SpamContent 21384 SpamPhrase 13821 SpamFeatures 416 SpamUrlDomain 13526 LocalDeliver 219835 RemoteDeliver 15440
-----Original
Message-----
If you are seeing 100,000 messages without Declude JunkMail and 200,000 messages with Declude JunkMail, that is a red flag that something is probably wrong in the Declude JunkMail configuration.
How are you getting the figure 100,000 and 200,000?
John T eServices For You
-----Original
Message-----
Final Update:
My mail server is running perfectly smooth processing mail as soon as it arrives while running Declude Antivirus and three DNS blacklists using Imails built-in antispam. I have tried to re-enabled Declude junkmail, but it immediately starts to backlog the spool directory again and mail processing is slow. Perhaps someone can see something that I do not in this log file… This is a sample connection with debug logging on.
I have a service contract with Declude and Imail for what that’s worth, but I’m not going to get anywhere with that unless I can help point them in the right direction so they deem me worthy to forward my issue onto someone with experience.
I’m currently processing what appears to be 100,000 messages per day with 3000 accounts (90% of that incoming mail). My previous counts of 200,000 only appear when declude junkmail is running, so they are not accurate.
Will
-----Original
Message-----
Just an update…
Last week I had disabled Declude and cleaned out my spool directory. For the next day I had not experienced any issues. My spooled messages are staying well under 500 and mail is flowing exactly how I want it to (without Declude). Now, we can get away with not having Declude Junkmail for a bit, but I really needed virus scanning, so I re-enabled Declude Antivirus. After I verified everything was running smoothly I downloaded F-prot and removed Mcafee before the weekend and things have also been running very smooth. Just a note, I had run Declude Antivirus for years without any issues and I only seem to run into these overflow problems when I introduce Declude Junkmail.
Since the major issues I had last week I have made three changes… I have modified the queue manager to process 100 messages at a time. I have disabled Declude Junkmail. I have now moved from Mcafee to F-Prot. The only one of these changes that has ensured that mail does not go into overflow and backup is the disabling of Declude Junkmail. I’m not so sure it’s a DNS issue because the Imail spam filters run perfectly fine, which I am now using in place of Declude. They do not do as good a job identifying spam, but they are better than nothing.
Things to think about:
I was interested in the statement that the mail server can be setup to not bounce messages if they are detected as SPAM. This still confuses me, because the BOUNCEONLYIFYOUMUST statement in the $default$.junkmail file appears to actually bounce the messages. As it is, all my filters are set to WARN and I don’t understand why changing them to BOUNCEONLYIFYOUMUST will help.
I do not believe I have bulk mailers on my system, but I will not discount it. Does anyone have a good suggestion for determining this? After looking through my logs and running Imail log analyzer none of my own IP’s stand out for message counts and the invalid user entries I find are from outside sources outside of my network. These connections are always denied and mail does not get processed onto our server. I will think about Declude HiJack.
I still want to use Declude Junkmail, so I will test some of the suggestions put into place such as whitelisting my IP range and disabling outbout virus scanning, but other than these two suggestions, I don’t see any major changes here that will affect me.
Will
Friday: SpamContent 13400 SpamPhrase 19107 SpamFeatures 1283 SpamUrlDomain 35018 LocalDeliver 92331 RemoteDeliver 10526
Saturday: SpamContent 10089 SpamPhrase 20739 SpamFeatures 1090 SpamUrlDomain 27194 LocalDeliver 83297 RemoteDeliver 9008
Sunday: SpamContent 10425 SpamPhrase 18741 SpamFeatures 793 SpamUrlDomain 25756 LocalDeliver 81033 RemoteDeliver 10142
-----Original
Message-----
Will, Well thank you to everyone who responded to my need for perspective and assistance.
I believe I will be in need of a mail gateway if I am to continue to use Declude.
Also, does anyone know how to configure an Imail/Declude setup to not bounce spam messages?
Will
-----Original
Message-----
I can second the need for a gateway defense when under attack. We run a Windows shop and were being crushed under multiple dictionary attacks for two domains on a daily basis. I took the daunting task to build our first Linux box running Postfix. The first box was a tough start though I had a employee who had Linux experience. We are running Postfix on OpenBSD 3.6 with MySql for dynamic update ability. (I am still working on grabbing additions, updates and deletions from SmarterMail admins so we can throw all our domains in Postfix and update in realtime) After a few weeks we added a second box in the event the first box went down. The second box was a breeze since it was basically a duplication. Both mx records now point at the two boxes. The hardware was old 500Mhz and 1ghz cpu with 512mbs of ram each. The 1ghz is primary and takes 75% of the load without much effort with plenty of free memory. The whole setup allows the main server running SmarterMail/Declude Pro/Sniffer/F-Prot to respond quickly to POP, web mail and smtp traffic requests.
The Linus approach only should cost you some time and old equipment as the software is free. Our experience over the last two years showed it was worth climbing the short Linux learning cliff. And it is true ... they run forever
One important note not related to using a gateway: We never bounce spam e-mail back to the "sender". The backscatter traffic can kill you and skew your reports.
Michael
Jaworski
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ ===================================================== |
Title: Message
- RE: [Declude.JunkMail] Declude Woes Will
- RE: [Declude.JunkMail] Declude Woes Hirthe, Alexander