>>>>How many E-mails do you send/receive per day? Weekly Average is LocalDeliver 7338 RemoteDeliver 2722
OK, a normal server should be able to handle that load without any problems. Even an old single CPU P500 server can handle 50,000 or so E-mails/day, with full virus and spam scanning.
>>>>Have you checked the D*.SMD files to see if there is anything common among them (all very large, all bounce messages, etc.)?
They seemed to be mixed between large messages and bounced. More often they are bounced.
Then it sounds like the bounce messages may be causing the problem. If you are bouncing E-mails to non-existent addresses, they will likely sit in the spool for 2 days, with lots of attempts taking up CPU time and bandwidth.
Am I slowing down my server with the notifications and scanning for attachments?
The scanning for attachments shouldn't be a problem -- the main problem is bouncing them (or sending notifications). The problem is that if the notification/bounce is for spam or a virus, the chances are the return address is fake, causing the notification/bounce to either [1] be delivered right away, to the wrong person (offloading your work to them, which isn't fair), or [2] not get delivered, and eat up resources.
If you're going to send notifications for banned file extensions, you should be sure that you are also scanning for viruses (and that the viruses take priority over the banned file extensions). If you go to http://www.declude.com/tools you can use the Test Virus Sender to send the safe eicar.com file -- it should get caught as a virus, not a banned file extension. If it gets caught as a banned file extension, that means that the tons of viruses that likely hit your server each day are going to result in bounces, eating up resources.
>>>>Is there a way to quarantine the blocked attachment for later retrieval? >>>>Declude Virus will automatically quarantine the blocked E-mails to the \IMail\spool\virus directory.
How can I process or rediect the *.smd file to a user if it is a valid email?
You should cross that bridge when you get to it. :)
Under normal conditions, it should be very rare for a legitimate E-mail to get caught as a virus. The only times I can recall this happening were either with F-Prot when set to look for "suspicious files" (which we don't recommend doing), or with McAfee having false positives when the headers of a virus were quoted in an E-mail (which should rarely occur, but happened recently on our Declude Virus mailing list).
However, if you absolutely, positively *must* do it, you can copy the D*.SMD and Q*.SMD file from the virus directory back to the spool directory, and it will get sent out on the next queue run. However, if you do this, be *sure* that you know that it is a valid E-mail (and/or that the recipient is willing to bear the risk of receiving it).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
