From a quick glance you have no filters defined which are the most cpu
intensive assuming those filters are of type "body". What is your mail
volume and hardware? Are you running sniffer in persistent mode?
Darrell
-------------------------------------------
DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus. Download
it today - http://www.invariantsystems.com
----- Original Message -----
From: "Orillia ProNet Administration" <[EMAIL PROTECTED]>
To: "Declude Mail List" <declude.junkmail@declude.com>
Sent: Wednesday, October 12, 2005 10:21 AM
Subject: [Declude.JunkMail] Need Help Optimizing Junkmail
Hi everyone. Need some help with optimizing my global.cfg for Junkmail.
Processing is really slow and bogging down the mail server. I remove
Declude
from the picture and everything is fine. Here is my current config [IMail
815HF2 running Declude 1.81:
LOGFILE c:\decludelogs\spam\dec####.log
LOGLEVEL MID
HOP 0
#HOPHIGH 1
XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%]
XSENDER OFF
XSPOOLNAME OFF
#Sniffer
SNIFFER external nonzero "c:\sniffer\h6bcwnii.exe oopthzk6ukdmku5j" 25
0
DSBL ip4r list.dsbl.org * 7
0
ORDB ip4r relays.ordb.org * 5
0
SECURITYSAGE rhsbl blackhole.securitysage.com * 15
0
SPAMCOP ip4r bl.spamcop.net 127.0.0.2 20
0
DSN rhsbl dsn.rfc-ignorant.org 127.0.0.2 3
0
NOABUSE rhsbl abuse.rfc-ignorant.org 127.0.0.4 1
0
NOPOSTMASTER rhsbl postmaster.rfc-ignorant.org 127.0.0.3 1
0
CBLPRONET ip4r cbl.abuseat.org 127.0.0.2 5
0
CSMAPRONET ip4r sbl.csma.biz 127.0.0.2 5
0
RMSTPRONET ip4r rmst.dnsbl.net.au 127.0.0.2 5
0
SORBSPRONET ip4r dnsbl.sorbs.net 127.0.0.2 5
0
CHPRONET ip4r china.blackholes.us 127.0.0.2 7
0
SPAMBAGPNT ip4r blacklist.spambag.org 127.0.0.2 7
0
NJABLPNT ip4r dnsbl.njabl.org * 5
0
BLARSPNT ip4r block.blars.org * 5
0
MAILPOLICE-BULK rhsbl bulk.rhs.mailpolice.com 127.0.0.2
15 0
MAILPOLICE-PORN rhsbl porn.rhs.mailpolice.com 127.0.0.2
15 0
PNTAHBL rhsbl rhsbl.ahbl.org 127.0.0.2
5 0
BONDEDSENDER ip4r query.bondedsender.org
127.0.0.10 -20 0
BADHEADERS badheaders x x 5 0
BASE64 base64 x x 12 0
HELOBOGUS helovalid x x 5 0
MAILFROM envfrom x x 12 0
REVDNS revdnsexists x x 5 0
ROUTING spamrouting x x 5 0
SPAMHEADERS spamheaders x x 5 0
PERCENT percent x x 3 0
# PRONETBODY filter C:\IMail\Declude\pronetbody.txt x 15
0
# PRONETMF filter C:\IMail\Declude\pronetmf.txt x 15
0
# PRONETSUB filter C:\IMail\Declude\pronetsub.txt x 15
0
# PRONETSUBCHAR filter C:\IMail\Declude\pronetsubchar.txt x
1 0
# URLS filter C:\IMail\Declude\urls.txt x 15
0
NONENGLISH nonenglish x x 15 0
SUBJECTSPACES subjectspaces 15 x 8 0
SUBJECTCHARS subjectchars 50 x 5 0
COMMENTS10 comments 10 x 5 0
COMMENTS20 comments 20 x 5 0
COMMENTS40 comments 40 x 5 0
COMMENTS60 comments 60 x 5 0
COMMENTS80 comments 80 x 5 0
COMMENTS100 comments 100 x 5 0
WEIGHT30 weight x x 30 0
BADWHOIS rhsbl whois.rfc-ignorant.org 127.0.0.5 2
0
BLITZEDALL ip4r opm.blitzed.org * 7
0
DSBLALL ip4r unconfirmed.dsbl.org * 6
0
FABELSOURCES ip4r spamsources.fabel.dk 127.0.0.2 5
0
FIVETENOPTIN ip4r blackholes.five-ten-sg.com 127.0.0.4 5
0
FIVETENSRC ip4r blackholes.five-ten-sg.com 127.0.0.2 6
0
FIVETENIGNORE ip4r blackholes.five-ten-sg.com 127.0.0.7 5
0
LNSGBLOCK ip4r spamguard.leadmon.net 127.0.0.7 3
0
LNSGDUL ip4r spamguard.leadmon.net 127.0.0.2 5
0
INTERSIL ip4r blackholes.intersil.net 127.0.0.2 5
0
SPAMHAUS ip4r sbl.spamhaus.org 127.0.0.2 4
0
SNIFFER LOG
DSBL LOG
ORDB LOG
SECURITYSAGE LOG
SPAMCOP LOG
DSN LOG
NOABUSE LOG
NOPOSTMASTER LOG
CBLPRONET LOG
CSMAPRONET LOG
RMSTPRONET LOG
SORBSPRONET LOG
CHPRONET LOG
SPAMBAGPNT LOG
NJABLPNT LOG
BLARSPNT LOG
MAILPOLICE-BULK LOG
MAILPOLICE-PORN LOG
PNTAHBL LOG
BONDEDSENDER LOG
BADHEADERS LOG
BASE64 LOG
HELOBOGUS LOG
MAILFROM LOG
REVDNS LOG
ROUTING LOG
SPAMHEADERS LOG
PERCENT LOG
# PRONETBODY LOG
# PRONETMF LOG
# PRONETSUB LOG
# PRONETSUBCHAR LOG
# URLS LOG
NONENGLISH LOG
SUBJECTSPACES LOG
SUBJECTCHARS LOG
COMMENTS10 LOG
COMMENTS20 LOG
COMMENTS40 LOG
COMMENTS60 LOG
COMMENTS80 LOG
COMMENTS100 LOG
WEIGHT30 LOG
BADWHOIS LOG
BLITZEDALL LOG
DSBLALL LOG
FABELSOURCES LOG
FIVETENOPTIN LOG
FIVETENSRC LOG
FIVETENIGNORE LOG
LNSGBLOCK LOG
LNSGDUL LOG
INTERSIL LOG
SPAMHAUS LOG
Cheers
Mark
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
