Re: What stripe size for mail server?
Oh yeah ur right. :) The file system itself is written in the stripes and stripe boundaries don't have to correspond to cluster boundaries although I think this would be advantageous. 1 cluster -> 1 stripe would be the optimum speed configuration I think. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: What stripe size for mail server?
On Thursday 11 November 2004 09.12, Chris Wagner wrote: > Since you (happy Adrian??) Much easier to read :-) [...] > If u have 32KB stripes so that > almost every file fits in 1 stripe, the leftover space is wasted. So a > 2.5KB file written in a 32 KB stripe wastes 30.5 KB. Err. This statement is wrong. RAID stripe size is totally unrelated to the allocation unit used in the filesystem. greetings -- vbi -- Oops -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: What stripe size for mail server?
Ah, ok that changes everything. "mailboxes" ;) At 12:30 AM 11/11/04 +0100, Marcin Owsiany wrote: >> If u still need RAID 5 then I would make the stripe size equal to >> average file size / number of data disks up to no more than 32KB stripe. > >Since avg file size would be something around 2500 bytes, and we have 5 >disks, that would give us a 500 byte stripe. I don't think that is even >possible. Since you (happy Adrian??) have lots of small essentially static files the limiting factor will probably be the disk I/O. Optimizing for I/O is a trade off for optimizing for non-wasteful disk usage. To bring down the number of I/O's needed to get a file u want to make the stripe larger. But making the stripe larger can slow down writes and waste space in the form of "latent space". If u have 32KB stripes so that almost every file fits in 1 stripe, the leftover space is wasted. So a 2.5KB file written in a 32 KB stripe wastes 30.5 KB. This could be ok if space is no object in the face of fast I/O speed. Given how cheap hard disks are now it could be worth it to err on the large side. The other caveat there is the read-recompute-write cycle of a large stripe. Smaller stripes speed this up. So all in all, for ur microscopic little files, I would make the stripe 4 KB. If ur having trouble with the stripe concept it is identical in practical use to a cluster on a normal partition. RAID:stripe::partition:cluster. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: What stripe size for mail server?
also sprach Adrian 'Dagurashibanipal' von Bidder <[EMAIL PROTECTED]> [2004.11.11.0842 +0100]: > To optimize random small reads, it's best if a read can be satisfied by > touching only one disk, so large stripe sizes should be better - with your > avg file size, 8k or 16k stripes should be fine; even 4k probably wouldn't > hurt much. We are using the default, 64k on a server with 140 users and about 80 mails/second, with a mail store of 27 Gb, with an AMD K6 1.2 GHz, 1 Gb RAM, and three Maxtor Ultra9 7200 PATA disks. No problems. -- Please do not send copies of list mail to me; I read the list! .''`. martin f. krafft <[EMAIL PROTECTED]> : :' :proud Debian developer, admin, user, and author `. `'` `- Debian - when you have better things to do than fixing a system Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver! signature.asc Description: Digital signature
Re: What stripe size for mail server?
On Wednesday 10 November 2004 23.29, Chris Wagner wrote: It's 'you' - three letters :-) > If u still need RAID 5 then I would make the > stripe size equal to average file size / number of data disks up to no > more than 32KB stripe. To optimize random small reads, it's best if a read can be satisfied by touching only one disk, so large stripe sizes should be better - with your avg file size, 8k or 16k stripes should be fine; even 4k probably wouldn't hurt much. Disclaimer, however: this is based on reasoning, not experience. cheers -- vbi -- Oops -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: What stripe size for mail server?
On Wed, Nov 10, 2004 at 05:29:37PM -0500, Chris Wagner wrote: > I would say that RAID 5 is probably overkill for a mail queue. It's not the mail queue. Its the mail store (maildirs). We have no problems with mail queue performance so far. > Unless ur > mail queue is running hundreds of gigabytes and overloading a single disk, The store is over 60 GB now, and still growing. Will probably reach over 100 GB in a few months. > a > normal single hard drive is sufficient. Definitely not sufficient for us :) > Based on ur graph it looks like ur > queue is under half a gig. What makes you think so? I did mention that those data were just from a random sample. > If you want redundancy for the mail queue then a > RAID 1 (mirroring) will give u everything u need. Mirroring seems a little bit to expensive for us. But we will certainly consider that if someone points me to a comparison that strongly favors mirroring over RAID5 for a similar setup. Simply saying that > RAID 5 is for extremely > high usage like large file servers and stuff. is not enough to make the decision, unfortunately. > Adding RAM to beef up the > file cache can give u a significant speedup (Ur entire queue can be RAM > cache). Unfortunately adding more system RAM to that machine is not an option (at least for now). We are going to add more RAM to the controller, though. > If u still need RAID 5 then I would make the stripe size equal to > average file size / number of data disks up to no more than 32KB stripe. Since avg file size would be something around 2500 bytes, and we have 5 disks, that would give us a 500 byte stripe. I don't think that is even possible. Marcin -- Marcin Owsiany <[EMAIL PROTECTED]> http://marcin.owsiany.pl/ GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: What stripe size for mail server?
I would say that RAID 5 is probably overkill for a mail queue. Unless ur mail queue is running hundreds of gigabytes and overloading a single disk, a normal single hard drive is sufficient. Based on ur graph it looks like ur queue is under half a gig. If you want redundancy for the mail queue then a RAID 1 (mirroring) will give u everything u need. RAID 5 is for extremely high usage like large file servers and stuff. Adding RAM to beef up the file cache can give u a significant speedup (Ur entire queue can be RAM cache). If u still need RAID 5 then I would make the stripe size equal to average file size / number of data disks up to no more than 32KB stripe. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
What stripe size for mail server?
Hi! http://mail1.expro.pl/~porridge/dist.png shows the distribution of file sizes on our mail server (actually just the partition holding maildirs). The sample was 80 files. "-512" means zero-byte files. "0" means the files whose sizes are greater than zero, but less than 512. "512": greater than 512, but less than 1024 etc The green line shows the distribution of messages in Maildir/(new|cur|tmp). The red one also includes the number of other files (mostly sqwebmail index and preferences files, .qmail, etc). We probably need to optimize on reads, since currently there are 16 times more block reads than block writes on that partition. Given that, what would be the best stripe size for (hardware) RAID 5 (currently 5 disks)? I read somewhere that large stripe sizes are good for small random reads, but what is your experience? Or maybe RAID 5 is totally unreasonable for such usage? regards, Marcin -- Marcin Owsiany <[EMAIL PROTECTED]> http://marcin.owsiany.pl/ GnuPG: 1024D/60F41216 FE67 DA2D 0ACA FC5E 3F75 D6F6 3A0D 8AA0 60F4 1216 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: protecting mail server from DOS
Words by Lucas Albers [Tue, Feb 17, 2004 at 12:25:17AM -0700]: > Just recently I had my mail server swamped by a single virus machine that > kept resending a virus message, ignoring my 5xx rejection code. > > Is it possbile to block this via an iptables smtp max connection throttle > code? > > How do you handle this? > Via iptables?, or via qmail/postfix/exim/sendmail internal coding? > Null route 'em. That will keep them busy for quite a long time. > Does anyone else encounter this problem on a regular basis? No. And I find it hard that a client machine can so easily disturb your service. > How do you solve this? > null route. -- Jose Celestino | http://xpto.org/~japc/files/japc-pgpkey.asc "...the law, cold and aloof by its very nature, has no access to the passions that might justify the cruel act of murder." -- SADE
Re: protecting mail server from DOS
Words by Lucas Albers [Tue, Feb 17, 2004 at 12:25:17AM -0700]: > Just recently I had my mail server swamped by a single virus machine that > kept resending a virus message, ignoring my 5xx rejection code. > > Is it possbile to block this via an iptables smtp max connection throttle > code? > > How do you handle this? > Via iptables?, or via qmail/postfix/exim/sendmail internal coding? > Null route 'em. That will keep them busy for quite a long time. > Does anyone else encounter this problem on a regular basis? No. And I find it hard that a client machine can so easily disturb your service. > How do you solve this? > null route. -- Jose Celestino | http://xpto.org/~japc/files/japc-pgpkey.asc "...the law, cold and aloof by its very nature, has no access to the passions that might justify the cruel act of murder." -- SADE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: protecting mail server from DOS
Lucas Albers wrote: Just recently I had my mail server swamped by a single virus machine that kept resending a virus message, ignoring my 5xx rejection code. Is it possbile to block this via an iptables smtp max connection throttle code? How do you handle this? Via iptables?, or via qmail/postfix/exim/sendmail internal coding? Does anyone else encounter this problem on a regular basis? How do you solve this? Check out http://www.spamshield.org/ a perl script that monitors the smtp's (like sendmail) logs for unusual events, and on a set amount of mail received from a single IP, takes action and informs via email, usually it sets up an invalid route to the offending spammer, effectively blocking any contact with that machine, but it can be configured to do anything. José PS please reply to the list
Re: protecting mail server from DOS
Lucas Albers wrote: Just recently I had my mail server swamped by a single virus machine that kept resending a virus message, ignoring my 5xx rejection code. Is it possbile to block this via an iptables smtp max connection throttle code? How do you handle this? Via iptables?, or via qmail/postfix/exim/sendmail internal coding? Does anyone else encounter this problem on a regular basis? How do you solve this? Check out http://www.spamshield.org/ a perl script that monitors the smtp's (like sendmail) logs for unusual events, and on a set amount of mail received from a single IP, takes action and informs via email, usually it sets up an invalid route to the offending spammer, effectively blocking any contact with that machine, but it can be configured to do anything. José PS please reply to the list -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: protecting mail server from DOS
Lucas Albers wrote: Just recently I had my mail server swamped by a single virus machine that kept resending a virus message, ignoring my 5xx rejection code. Is it possbile to block this via an iptables smtp max connection throttle code? How do you handle this? Via iptables?, or via qmail/postfix/exim/sendmail internal coding? Does anyone else encounter this problem on a regular basis? How do you solve this? In cases like this where a machine is being extremely annoying/stubborn, I usually fire off an email to the tech contact of the netblock of the offending machine, then null route the IP at our border router. I put a comment in the access list that it's a temporary block, then I can remove it later on. It's pretty rare for me to see a case like that. In the past, I most commonly did it for machines with brain-dead spamware that plugged away against my 550's. Strange that your machine is seeing ill effects from one infected client. You may want to review your MTA settings to see if you're missing something. --Rich
Re: protecting mail server from DOS
Lucas Albers wrote: Just recently I had my mail server swamped by a single virus machine that kept resending a virus message, ignoring my 5xx rejection code. Is it possbile to block this via an iptables smtp max connection throttle code? How do you handle this? Via iptables?, or via qmail/postfix/exim/sendmail internal coding? Does anyone else encounter this problem on a regular basis? How do you solve this? In cases like this where a machine is being extremely annoying/stubborn, I usually fire off an email to the tech contact of the netblock of the offending machine, then null route the IP at our border router. I put a comment in the access list that it's a temporary block, then I can remove it later on. It's pretty rare for me to see a case like that. In the past, I most commonly did it for machines with brain-dead spamware that plugged away against my 550's. Strange that your machine is seeing ill effects from one infected client. You may want to review your MTA settings to see if you're missing something. --Rich -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: protecting mail server from DOS
On Tue, Feb 17, 2004 at 12:25:17AM -0700, Lucas Albers wrote: > Just recently I had my mail server swamped by a single virus machine > that kept resending a virus message, ignoring my 5xx rejection code. > > Is it possbile to block this via an iptables smtp max connection > throttle code? > > How do you handle this? > Via iptables?, or via qmail/postfix/exim/sendmail internal coding? > > Does anyone else encounter this problem on a regular basis? > How do you solve this? I haven't tried any of this, but search for "tarpit" on google. Here are some links that might be helpful: http://www.securityfocus.com/infocus/1723 http://www.hackbusters.net/LaBrea.html http://www.palomine.net/qmail/tarpit.html If there is one particular machine you want to slow down/block, why not just block it completely from sending mail until it's fixed? The owner of the machine is likely to notice the problem more quickly if he/she can't send mail at all. -- Michael Wood <[EMAIL PROTECTED]>
protecting mail server from DOS
Just recently I had my mail server swamped by a single virus machine that kept resending a virus message, ignoring my 5xx rejection code. Is it possbile to block this via an iptables smtp max connection throttle code? How do you handle this? Via iptables?, or via qmail/postfix/exim/sendmail internal coding? Does anyone else encounter this problem on a regular basis? How do you solve this? -- --Luke CS Sysadmin, Montana State University-Bozeman
Re: protecting mail server from DOS
On Tue, Feb 17, 2004 at 12:25:17AM -0700, Lucas Albers wrote: > Just recently I had my mail server swamped by a single virus machine > that kept resending a virus message, ignoring my 5xx rejection code. > > Is it possbile to block this via an iptables smtp max connection > throttle code? > > How do you handle this? > Via iptables?, or via qmail/postfix/exim/sendmail internal coding? > > Does anyone else encounter this problem on a regular basis? > How do you solve this? I haven't tried any of this, but search for "tarpit" on google. Here are some links that might be helpful: http://www.securityfocus.com/infocus/1723 http://www.hackbusters.net/LaBrea.html http://www.palomine.net/qmail/tarpit.html If there is one particular machine you want to slow down/block, why not just block it completely from sending mail until it's fixed? The owner of the machine is likely to notice the problem more quickly if he/she can't send mail at all. -- Michael Wood <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
protecting mail server from DOS
Just recently I had my mail server swamped by a single virus machine that kept resending a virus message, ignoring my 5xx rejection code. Is it possbile to block this via an iptables smtp max connection throttle code? How do you handle this? Via iptables?, or via qmail/postfix/exim/sendmail internal coding? Does anyone else encounter this problem on a regular basis? How do you solve this? -- --Luke CS Sysadmin, Montana State University-Bozeman -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
"J.J. van Gorkum" <[EMAIL PROTECTED]> writes: > amavisd-new (amavisd-ng has some mime decoding problems... especially > pgp/gpg encrypted mail) As the maintainer of AMaViS-ng I am looking forward to your bug report about the issues you have encountered. Regards, -Hilko
Re: anti virus software for mail server
"J.J. van Gorkum" <[EMAIL PROTECTED]> writes: > amavisd-new (amavisd-ng has some mime decoding problems... especially > pgp/gpg encrypted mail) As the maintainer of AMaViS-ng I am looking forward to your bug report about the issues you have encountered. Regards, -Hilko -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
Hello, Am 19:16 2003-02-24 +0100 hat Russell Coker geschrieben: > >On Mon, 24 Feb 2003 18:34, Colin Ellis wrote: >The fastest drives (15000rpm) will take an average of 4ms for the disk to spin >to the correct location to start a transfer in addition to the seek times for >moving the heads. That gives a performance of something less than 100 IO >operations per second per disk. I am working on a bunch of Dell PowerEdge >2650 machines with 4*U160 15000rpm SCSI disks in a hardware RAID-5 with a >battery backed write-back cache. This gives a peak performance of about 130 >disk writes per second. Last year I have gotten a Athlon MP 1900 with an IPC-Vortex Raid-5 and three IBM 146 GByte (U320/1). I have tested it with postgresql and with a smpt/pop3 Server. I have made a stresstest by seting up 50 users and subscribed all to more then 40 debian-* Mailinglist... Traffic enough !!! The server has handled more then 220 Mails/second unfortunately I was not able to test in the same time user accesses with pop. OK, for you a little Bbit overkil like for me... I think, I will handle only 500-800 Users with normal traffic which mean, around 10-20 mails a day. Traffic which can handled by a Duron 900MHz, 256 MB and a RAID-5 Array of 3 x IBM 18 GByte (U320/1) on an IPC-Vortex. My Dual-Athlon will be the central nfs-Server of my Cyber-Center/ Internet-Cafe in Strasbourg, where users have 100 MByte Diskspace, Which can used for private files, ~/public_html, ~/mail and ftpspace inside of ~/public_html. in plus it serves Webmail, pop3, asmtp and suports 30-40 Workstations with nfs inside my Cyber-Center. I have used Webmin but it does not what I need and now I use my own php4 Scripts to manage the users... I think, there is no problem with the traffic. Oh yes, if I run public, I will use 4 + 1 Harddisk. Greetings from Strasbourg Michelle
Re: Mail server
Hello, Am 19:16 2003-02-24 +0100 hat Russell Coker geschrieben: > >On Mon, 24 Feb 2003 18:34, Colin Ellis wrote: >The fastest drives (15000rpm) will take an average of 4ms for the disk to spin >to the correct location to start a transfer in addition to the seek times for >moving the heads. That gives a performance of something less than 100 IO >operations per second per disk. I am working on a bunch of Dell PowerEdge >2650 machines with 4*U160 15000rpm SCSI disks in a hardware RAID-5 with a >battery backed write-back cache. This gives a peak performance of about 130 >disk writes per second. Last year I have gotten a Athlon MP 1900 with an IPC-Vortex Raid-5 and three IBM 146 GByte (U320/1). I have tested it with postgresql and with a smpt/pop3 Server. I have made a stresstest by seting up 50 users and subscribed all to more then 40 debian-* Mailinglist... Traffic enough !!! The server has handled more then 220 Mails/second unfortunately I was not able to test in the same time user accesses with pop. OK, for you a little Bbit overkil like for me... I think, I will handle only 500-800 Users with normal traffic which mean, around 10-20 mails a day. Traffic which can handled by a Duron 900MHz, 256 MB and a RAID-5 Array of 3 x IBM 18 GByte (U320/1) on an IPC-Vortex. My Dual-Athlon will be the central nfs-Server of my Cyber-Center/ Internet-Cafe in Strasbourg, where users have 100 MByte Diskspace, Which can used for private files, ~/public_html, ~/mail and ftpspace inside of ~/public_html. in plus it serves Webmail, pop3, asmtp and suports 30-40 Workstations with nfs inside my Cyber-Center. I have used Webmin but it does not what I need and now I use my own php4 Scripts to manage the users... I think, there is no problem with the traffic. Oh yes, if I run public, I will use 4 + 1 Harddisk. Greetings from Strasbourg Michelle -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Mon, Mar 10, 2003 at 05:11:38PM +0100, J.J. van Gorkum wrote: > On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote: > > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote: > > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been > > > > updated in a long time, but the virus signatures appear very recent. > > > > Who is updating the signatures? How often do they come out? > > > > > > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > > > a virus and clamav doesn't we mail the virus part of the email to the > > > maker of clamv... > > > > What do you use to unpack MIME messages for clamav? I haven't find > > anything yet that can unpack messages the way trendmicro does, so clamav > > will miss a great deal of viruses, mostly in error messages. > > > amavisd-new (amavisd-ng has some mime decoding problems... especially > pgp/gpg encrypted mail) for amavisd-new look at BTW: Have you ever heard about a virus which can self-sign itself with PGP/GPG? :) Marcin
Re: anti virus software for mail server
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote: > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote: > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been > > > updated in a long time, but the virus signatures appear very recent. > > > Who is updating the signatures? How often do they come out? > > > > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > > a virus and clamav doesn't we mail the virus part of the email to the > > maker of clamv... > > What do you use to unpack MIME messages for clamav? I haven't find > anything yet that can unpack messages the way trendmicro does, so clamav > will miss a great deal of viruses, mostly in error messages. > amavisd-new (amavisd-ng has some mime decoding problems... especially pgp/gpg encrypted mail) for amavisd-new look at http://www.ijs.si/software/amavisd JJ
Re: anti virus software for mail server
On Mon, Mar 10, 2003 at 05:11:38PM +0100, J.J. van Gorkum wrote: > On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote: > > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote: > > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been > > > > updated in a long time, but the virus signatures appear very recent. > > > > Who is updating the signatures? How often do they come out? > > > > > > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > > > a virus and clamav doesn't we mail the virus part of the email to the > > > maker of clamv... > > > > What do you use to unpack MIME messages for clamav? I haven't find > > anything yet that can unpack messages the way trendmicro does, so clamav > > will miss a great deal of viruses, mostly in error messages. > > > amavisd-new (amavisd-ng has some mime decoding problems... especially > pgp/gpg encrypted mail) for amavisd-new look at BTW: Have you ever heard about a virus which can self-sign itself with PGP/GPG? :) Marcin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote: > On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote: > > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > > > Can someone fill me in on ClamAV a little bit, the engine hasn't been > > > updated in a long time, but the virus signatures appear very recent. > > > Who is updating the signatures? How often do they come out? > > > > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > > a virus and clamav doesn't we mail the virus part of the email to the > > maker of clamv... > > What do you use to unpack MIME messages for clamav? I haven't find > anything yet that can unpack messages the way trendmicro does, so clamav > will miss a great deal of viruses, mostly in error messages. > amavisd-new (amavisd-ng has some mime decoding problems... especially pgp/gpg encrypted mail) for amavisd-new look at http://www.ijs.si/software/amavisd JJ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote: > What do you use to unpack MIME messages for clamav? I haven't find > anything yet that can unpack messages the way trendmicro does, so clamav > will miss a great deal of viruses, mostly in error messages. E.g. amavis. Wanted
Re: anti virus software for mail server
On Saturday 08 March 2003 15:12, J.J. van Gorkum wrote: > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > a virus and clamav doesn't we mail the virus part of the email to the > maker of clamv... We use mailscanner (www.mailscanner.info) with f-prot here Works rather well Mozzi
RE: anti virus software for mail server
On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote: > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > > Can someone fill me in on ClamAV a little bit, the engine hasn't been > > updated in a long time, but the virus signatures appear very recent. > > Who is updating the signatures? How often do they come out? > > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > a virus and clamav doesn't we mail the virus part of the email to the > maker of clamv... What do you use to unpack MIME messages for clamav? I haven't find anything yet that can unpack messages the way trendmicro does, so clamav will miss a great deal of viruses, mostly in error messages. -m-
Re: anti virus software for mail server
On Mon, Mar 10, 2003 at 11:22:46AM +0100, Hirling Endre wrote: > What do you use to unpack MIME messages for clamav? I haven't find > anything yet that can unpack messages the way trendmicro does, so clamav > will miss a great deal of viruses, mostly in error messages. E.g. amavis. Wanted -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: anti virus software for mail server
On Sat, 2003-03-08 at 14:12, J.J. van Gorkum wrote: > On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > > Can someone fill me in on ClamAV a little bit, the engine hasn't been > > updated in a long time, but the virus signatures appear very recent. > > Who is updating the signatures? How often do they come out? > > > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > a virus and clamav doesn't we mail the virus part of the email to the > maker of clamv... What do you use to unpack MIME messages for clamav? I haven't find anything yet that can unpack messages the way trendmicro does, so clamav will miss a great deal of viruses, mostly in error messages. -m- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Saturday 08 March 2003 15:12, J.J. van Gorkum wrote: > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds > a virus and clamav doesn't we mail the virus part of the email to the > maker of clamv... We use mailscanner (www.mailscanner.info) with f-prot here Works rather well Mozzi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: anti virus software for mail server
On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > Can someone fill me in on ClamAV a little bit, the engine hasn't been > updated in a long time, but the virus signatures appear very recent. > Who is updating the signatures? How often do they come out? > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds a virus and clamav doesn't we mail the virus part of the email to the maker of clamv... -- JJ van Gorkum Knowledge Zone If UNIX isn't the solution, you've got the wrong problem.
RE: anti virus software for mail server
On Fri, 2003-03-07 at 16:44, C. R. Oldham wrote: > Can someone fill me in on ClamAV a little bit, the engine hasn't been > updated in a long time, but the virus signatures appear very recent. > Who is updating the signatures? How often do they come out? > We use amavisd-new with TrendMicro and ClamAV. When the Trendmicro vinds a virus and clamav doesn't we mail the virus part of the email to the maker of clamv... -- JJ van Gorkum Knowledge Zone If UNIX isn't the solution, you've got the wrong problem. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
We've used RAV for over a year, we're a pretty small site for this list (probably only about 300 users max) but it's worked PERFECTLY. The updating system has never failed, and it's never failed to catch a virus, including the morning we got slammed with about 250 bugbear messages from our local ISP. One thing we do with it from time to time is also use the engine to scan the home directories of our users (the main email server is connected via nfs to our samba server)... It works great for that too, although it's only ever found one macro virus. For us (2 domains) it's US$60 or something similar for a year of updates, I don't think you can beat that. We'd originally looked at it because it interfaced with the two primary things we were interested in, Openbsd and postfix, but we're planning on using it on our local debian server here as well as our colo redhat server in the states. Pulu - AFE.TO Ants Ph: Country code 676 - 878-1332 or 27946 http://www.afe.to > Hi, > > I've found > > RAV Antivirus > (http://www.ravantivirus.com/pages/showproduct.php?p=21) > > > but I never heard of that one before! From the first view it looks amazing > - so > if somebody has experience with that one post please! Of course also post > your > personal recommendations. > > As MTA I'm using Postfix 2.0 by the way ! > > > > Kind Regards, > > Markus Welsch > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] >
Re: anti virus software for mail server
I know that you have said you were using postfix, but I'd like to point
out MIMEDefang (sendmail milter). Very good software for mangling mail,
virus scanning, spam tagging, anything you can code really.
ii mimedefang 2.30-1 Electronic mail filter program
ii clamav 0.54-2 Powerful antivirus scanner for Unix
And to enable mail scaning you put into /etc/mail/mimedefang.pl.conf the
line,
$Features{'Virus:CLAMAV'} = '/usr/bin/clamscan';
And away she goes ;-)
Regards,
Brad Lay
([EMAIL PROTECTED])
On Fri, 7 Mar 2003, Markus Welsch wrote:
> Hi,
>
> I've found
>
> RAV Antivirus
> (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing -
> so
> if somebody has experience with that one post please! Of course also post your
> personal recommendations.
>
> As MTA I'm using Postfix 2.0 by the way !
>
>
>
> Kind Regards,
>
> Markus Welsch
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
Re: anti virus software for mail server
We've used RAV for over a year, we're a pretty small site for this list (probably only about 300 users max) but it's worked PERFECTLY. The updating system has never failed, and it's never failed to catch a virus, including the morning we got slammed with about 250 bugbear messages from our local ISP. One thing we do with it from time to time is also use the engine to scan the home directories of our users (the main email server is connected via nfs to our samba server)... It works great for that too, although it's only ever found one macro virus. For us (2 domains) it's US$60 or something similar for a year of updates, I don't think you can beat that. We'd originally looked at it because it interfaced with the two primary things we were interested in, Openbsd and postfix, but we're planning on using it on our local debian server here as well as our colo redhat server in the states. Pulu - AFE.TO Ants Ph: Country code 676 - 878-1332 or 27946 http://www.afe.to > Hi, > > I've found > > RAV Antivirus > (http://www.ravantivirus.com/pages/showproduct.php?p=21) > > > but I never heard of that one before! From the first view it looks amazing > - so > if somebody has experience with that one post please! Of course also post > your > personal recommendations. > > As MTA I'm using Postfix 2.0 by the way ! > > > > Kind Regards, > > Markus Welsch > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
I know that you have said you were using postfix, but I'd like to point
out MIMEDefang (sendmail milter). Very good software for mangling mail,
virus scanning, spam tagging, anything you can code really.
ii mimedefang 2.30-1 Electronic mail filter program
ii clamav 0.54-2 Powerful antivirus scanner for Unix
And to enable mail scaning you put into /etc/mail/mimedefang.pl.conf the
line,
$Features{'Virus:CLAMAV'} = '/usr/bin/clamscan';
And away she goes ;-)
Regards,
Brad Lay
([EMAIL PROTECTED])
On Fri, 7 Mar 2003, Markus Welsch wrote:
> Hi,
>
> I've found
>
> RAV Antivirus
> (http://www.ravantivirus.com/pages/showproduct.php?p=21)
>
>
> but I never heard of that one before! From the first view it looks amazing - so
> if somebody has experience with that one post please! Of course also post your
> personal recommendations.
>
> As MTA I'm using Postfix 2.0 by the way !
>
>
>
> Kind Regards,
>
> Markus Welsch
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
At 04:13 PM 3/7/2003 +0100, you wrote: >> Yes, it's a great Romanian AV software. >> But why not try a GPL software first -- ClamAV? > >I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution >which will still work fine under heavy load. We have been using Amavis and ClamAV for around 4 months with 2400 /Maildir's on a Pentium 111 with 500meg Ram. I am pretty happy with ClamAV and the virus definition updates are keeping our mail virus free, along with Amavis of course. Cheers Garry Garry Byrne Highway Internet
Re: anti virus software for mail server
On Fri, Mar 07, 2003 at 10:09:33AM -0800, Erick Lopez Carreon wrote: > If found a virus, then send mail to postmaster, sender > and receiver. Don't do that. You generate unnecessary traffic, which is pointless and annoying in many situations. Most recent viruses and worms use a special technique of mangling source and destination addresses, and your warnings rarely reach the person who's computer is infected. If you have a reliable method of detection _which_ virus was found in a given e-mail, you may send a warning if it's one of the older viruses which don't spoof e-mail headers. In case of Klez and friends -- the only information you can be quite sure of is the IP address of the sending machine. If you want, you could send the warning to the owner/administrator of the particular network, but do it only once per IP (i.e. keep the database of your previous mailings). Marcin
Re: anti virus software for mail server
At 04:13 PM 3/7/2003 +0100, you wrote: >> Yes, it's a great Romanian AV software. >> But why not try a GPL software first -- ClamAV? > >I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution >which will still work fine under heavy load. We have been using Amavis and ClamAV for around 4 months with 2400 /Maildir's on a Pentium 111 with 500meg Ram. I am pretty happy with ClamAV and the virus definition updates are keeping our mail virus free, along with Amavis of course. Cheers Garry Garry Byrne Highway Internet -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Fri, Mar 07, 2003 at 10:09:33AM -0800, Erick Lopez Carreon wrote: > If found a virus, then send mail to postmaster, sender > and receiver. Don't do that. You generate unnecessary traffic, which is pointless and annoying in many situations. Most recent viruses and worms use a special technique of mangling source and destination addresses, and your warnings rarely reach the person who's computer is infected. If you have a reliable method of detection _which_ virus was found in a given e-mail, you may send a warning if it's one of the older viruses which don't spoof e-mail headers. In case of Klez and friends -- the only information you can be quite sure of is the IP address of the sending machine. If you want, you could send the warning to the owner/administrator of the particular network, but do it only once per IP (i.e. keep the database of your previous mailings). Marcin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
We have 60 users by server in average, and here goes some mail statistics: M msgsfr bytes_from msgstobytes_to msgsrej msgsdis Mailer 10 0K 754 17445K0 0 *file* 3 3136 103034K 8465 30360K0 0 amavis 5 9271 549384K 6661 33748K0 0 smtp = T12407 652418K15880 81553K0 0 C6 59370 Clamav is executed by amavis each time that in/out a mail: Mar 7 12:06:09 server sendmail[15880]: h27I5Vwg015880: from=<[EMAIL PROTECTED]>, size=131300, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=SMTP, daemon=MTA, relay=web41305.mail.yahoo.com [66.218.93.54] Mar 7 12:06:11 server amavis[15884]: starting. amavis perl-11 Tue Dec 17 14:12:52 CST 2002 Mar 7 12:06:13 server amavis[15884]: Virus found - quarantined as virus-20030307-120613-15884 If found a virus, then send mail to postmaster, sender and receiver. And although the server from whom he takes these statistics has other services does not affect performance at all: Memory: TotalUsedFree Shared Buffers Cached Mem:191320 178292 13028 0 38672 74500 Swap: 530104 13252 516852 Bootup: xxxLoad average: 0.44 0.32 0.28 1/70 15909 user : 1d 22:56:56.35 3.5% page in : 4797642 disk 1: 441104r 6221758w nice : 0:08:10.22 0.0% page out: 62890365 system: 4d 22:26:53.14 8.7% swap in :63853 idle : 49d 19:09:54.18 87.8% swap out:25971 This machine is a pentium II 400Mhz with 192 MB ram and 7200 rpm hard disk IDE --- Markus Welsch <[EMAIL PROTECTED]> wrote: > > I already use amavis + clamav for our servers and > > works fine.I have 9 months using clamav and his > virus > > data base is update one o two times in a week. > > That sounds great. So could you give us a bit of a > short review, like how much > mail traffic those servers have to handle, etc. > = Por favor, NO utilice formatos de archivo propietarios para el intercambio de documentos, como DOC y XLS; sino HTML, RTF, TXT, CSV o cualquier otro que NO obligue a utilizar un programa de un fabricante concreto para tratar la información contenida en él. Erick Ivaan Lopez Carreon -CuahutliMexica Ing. en Electronica -Soñador aficionado. www.fsl.org.mx __ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/
Re: anti virus software for mail server
On Fri, Mar 07, 2003 at 04:13:30PM +0100, Markus Welsch wrote: > >Yes, it's a great Romanian AV software. > >But why not try a GPL software first -- ClamAV? > > I didn't take a look at ClamAV yet! I need a stable, proven-to-work > solution which will still work fine under heavy load. > I use Amavis + uvscan (McAfee) + spamassassin. There is a script to do FTP updates automatically every night. It works very well, but it requires quite a lot of resources. I believe this is more because of spamassassin (Perl interpreter), though. With 1 GB RAM and a PIV, it can handle about 100 msg/minute. -- Nicolas Bougues Axialys Interactive
Re: anti virus software for mail server
We have 60 users by server in average, and here goes some mail statistics: M msgsfr bytes_from msgstobytes_to msgsrej msgsdis Mailer 10 0K 754 17445K0 0 *file* 3 3136 103034K 8465 30360K0 0 amavis 5 9271 549384K 6661 33748K0 0 smtp = T12407 652418K15880 81553K0 0 C6 59370 Clamav is executed by amavis each time that in/out a mail: Mar 7 12:06:09 server sendmail[15880]: h27I5Vwg015880: from=<[EMAIL PROTECTED]>, size=131300, class=0, nrcpts=1, msgid=<[EMAIL PROTECTED]>, proto=SMTP, daemon=MTA, relay=web41305.mail.yahoo.com [66.218.93.54] Mar 7 12:06:11 server amavis[15884]: starting. amavis perl-11 Tue Dec 17 14:12:52 CST 2002 Mar 7 12:06:13 server amavis[15884]: Virus found - quarantined as virus-20030307-120613-15884 If found a virus, then send mail to postmaster, sender and receiver. And although the server from whom he takes these statistics has other services does not affect performance at all: Memory: TotalUsedFree Shared Buffers Cached Mem:191320 178292 13028 0 38672 74500 Swap: 530104 13252 516852 Bootup: xxxLoad average: 0.44 0.32 0.28 1/70 15909 user : 1d 22:56:56.35 3.5% page in : 4797642 disk 1: 441104r 6221758w nice : 0:08:10.22 0.0% page out: 62890365 system: 4d 22:26:53.14 8.7% swap in :63853 idle : 49d 19:09:54.18 87.8% swap out:25971 This machine is a pentium II 400Mhz with 192 MB ram and 7200 rpm hard disk IDE --- Markus Welsch <[EMAIL PROTECTED]> wrote: > > I already use amavis + clamav for our servers and > > works fine.I have 9 months using clamav and his > virus > > data base is update one o two times in a week. > > That sounds great. So could you give us a bit of a > short review, like how much > mail traffic those servers have to handle, etc. > = Por favor, NO utilice formatos de archivo propietarios para el intercambio de documentos, como DOC y XLS; sino HTML, RTF, TXT, CSV o cualquier otro que NO obligue a utilizar un programa de un fabricante concreto para tratar la información contenida en él. Erick Ivaan Lopez Carreon -CuahutliMexica Ing. en Electronica -Soñador aficionado. www.fsl.org.mx __ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: anti virus software for mail server
Can someone fill me in on ClamAV a little bit, the engine hasn't been updated in a long time, but the virus signatures appear very recent. Who is updating the signatures? How often do they come out? -- C. R. Oldham Director of Technology NCA CASI
Re: anti virus software for mail server
I already use amavis + clamav for our servers and works fine.I have 9 months using clamav and his virus data base is update one o two times in a week. That sounds great. So could you give us a bit of a short review, like how much mail traffic those servers have to handle, etc.
Re: anti virus software for mail server
I already use amavis + clamav for our servers and works fine.I have 9 months using clamav and his virus data base is update one o two times in a week. --- Markus Welsch <[EMAIL PROTECTED]> wrote: > > Yes, it's a great Romanian AV software. > > But why not try a GPL software first -- ClamAV? > > I didn't take a look at ClamAV yet! I need a stable, > proven-to-work solution > which will still work fine under heavy load. > > > -- > To UNSUBSCRIBE, email to > [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > = Por favor, NO utilice formatos de archivo propietarios para el intercambio de documentos, como DOC y XLS; sino HTML, RTF, TXT, CSV o cualquier otro que NO obligue a utilizar un programa de un fabricante concreto para tratar la información contenida en él. Erick Ivaan Lopez Carreon -CuahutliMexica Ing. en Electronica -Soñador aficionado. www.fsl.org.mx __ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/
Re: anti virus software for mail server
On Fri, Mar 07, 2003 at 04:13:30PM +0100, Markus Welsch wrote: > >Yes, it's a great Romanian AV software. > >But why not try a GPL software first -- ClamAV? > > I didn't take a look at ClamAV yet! I need a stable, proven-to-work > solution which will still work fine under heavy load. > I use Amavis + uvscan (McAfee) + spamassassin. There is a script to do FTP updates automatically every night. It works very well, but it requires quite a lot of resources. I believe this is more because of spamassassin (Perl interpreter), though. With 1 GB RAM and a PIV, it can handle about 100 msg/minute. -- Nicolas Bougues Axialys Interactive -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
Yes, it's a great Romanian AV software. But why not try a GPL software first -- ClamAV? I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution which will still work fine under heavy load.
Re: anti virus software for mail server
Markus Welsch wrote: Hi, I've found RAV Antivirus (http://www.ravantivirus.com/pages/showproduct.php?p=21) but I never heard of that one before! From the first view it looks amazing - so if somebody has experience with that one post please! Of course also post your personal recommendations. As MTA I'm using Postfix 2.0 by the way ! Markus, I've been using this product for a few months now and must say that the virusscanning part of it is really good. We are running an isp that's serving 500k+ customers and are running RAV on the incoming smtps and relays, you can imagine what amount of mail has to be scanned here. The software still doesn't use a lot of system resources and is quite configurable. We run qmail as MTA and ofcourse Debian as OS. RAV comes in rpm packages, I've requested that they make native debs and they said they are looking into it. So for now you should use alien to convert. Also you will have to make sure ownership and permissions are set right but that's all documented. The spamfiltering part of it sux. Virus definition updates are easily automated. The pricing is pretty cheap compared to other commercial vendors like McAffee etc. Response on support requests via e-mail is quick. So all in all I'm pretty happy with it. grtx, Mark
Re: anti virus software for mail server
Well I don't think the price is too bad for a ISP. The clamav engine seems to be last updated 21-Nov-2002 ... quite a while and it's not v1.0 yet. How many users are you providing antivirus for ? Which MTA are you using ? It is a bit pricy. I have used http://clamav.elektrapro.com/ with great sucess. Lot cheaper and works well. Kind Regards, Markus
Re: anti virus software for mail server
On Fri, Mar 07, 2003 at 03:03:16PM +0100, Markus Welsch wrote: > RAV Antivirus > (http://www.ravantivirus.com/pages/showproduct.php?p=21) Yes, it's a great Romanian AV software. But why not try a GPL software first -- ClamAV? Marcin
Re: anti virus software for mail server
On Friday 07 March 2003 14:03, Markus Welsch wrote: > Hi, > > I've found > > RAV Antivirus > (http://www.ravantivirus.com/pages/showproduct.php?p=21) > > > but I never heard of that one before! From the first view it looks amazing > - so if somebody has experience with that one post please! Of course also > post your personal recommendations. It is a bit pricy. I have used http://clamav.elektrapro.com/ with great sucess. Lot cheaper and works well. Take care - RL -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender. Any offers or quotation of service are subject to formal specification. Errors and omissions excepted. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of edNET or lightershade ltd. Finally, the recipient should check this email and any attachments for the presence of viruses. edNET and lightershade ltd accepts no liability for any damage caused by any virus transmitted by this email. -- -- Virus scanned by edNET.
RE: anti virus software for mail server
Can someone fill me in on ClamAV a little bit, the engine hasn't been updated in a long time, but the virus signatures appear very recent. Who is updating the signatures? How often do they come out? -- C. R. Oldham Director of Technology NCA CASI -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
I already use amavis + clamav for our servers and works fine.I have 9 months using clamav and his virus data base is update one o two times in a week. That sounds great. So could you give us a bit of a short review, like how much mail traffic those servers have to handle, etc. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
anti virus software for mail server
Hi, I've found RAV Antivirus (http://www.ravantivirus.com/pages/showproduct.php?p=21) but I never heard of that one before! From the first view it looks amazing - so if somebody has experience with that one post please! Of course also post your personal recommendations. As MTA I'm using Postfix 2.0 by the way ! Kind Regards, Markus Welsch
Re: anti virus software for mail server
I already use amavis + clamav for our servers and works fine.I have 9 months using clamav and his virus data base is update one o two times in a week. --- Markus Welsch <[EMAIL PROTECTED]> wrote: > > Yes, it's a great Romanian AV software. > > But why not try a GPL software first -- ClamAV? > > I didn't take a look at ClamAV yet! I need a stable, > proven-to-work solution > which will still work fine under heavy load. > > > -- > To UNSUBSCRIBE, email to > [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > = Por favor, NO utilice formatos de archivo propietarios para el intercambio de documentos, como DOC y XLS; sino HTML, RTF, TXT, CSV o cualquier otro que NO obligue a utilizar un programa de un fabricante concreto para tratar la información contenida en él. Erick Ivaan Lopez Carreon -CuahutliMexica Ing. en Electronica -Soñador aficionado. www.fsl.org.mx __ Do you Yahoo!? Yahoo! Tax Center - forms, calculators, tips, more http://taxes.yahoo.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
Yes, it's a great Romanian AV software. But why not try a GPL software first -- ClamAV? I didn't take a look at ClamAV yet! I need a stable, proven-to-work solution which will still work fine under heavy load. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
Markus Welsch wrote: Hi, I've found RAV Antivirus (http://www.ravantivirus.com/pages/showproduct.php?p=21) but I never heard of that one before! From the first view it looks amazing - so if somebody has experience with that one post please! Of course also post your personal recommendations. As MTA I'm using Postfix 2.0 by the way ! Markus, I've been using this product for a few months now and must say that the virusscanning part of it is really good. We are running an isp that's serving 500k+ customers and are running RAV on the incoming smtps and relays, you can imagine what amount of mail has to be scanned here. The software still doesn't use a lot of system resources and is quite configurable. We run qmail as MTA and ofcourse Debian as OS. RAV comes in rpm packages, I've requested that they make native debs and they said they are looking into it. So for now you should use alien to convert. Also you will have to make sure ownership and permissions are set right but that's all documented. The spamfiltering part of it sux. Virus definition updates are easily automated. The pricing is pretty cheap compared to other commercial vendors like McAffee etc. Response on support requests via e-mail is quick. So all in all I'm pretty happy with it. grtx, Mark -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
Well I don't think the price is too bad for a ISP. The clamav engine seems to be last updated 21-Nov-2002 ... quite a while and it's not v1.0 yet. How many users are you providing antivirus for ? Which MTA are you using ? It is a bit pricy. I have used http://clamav.elektrapro.com/ with great sucess. Lot cheaper and works well. Kind Regards, Markus -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Fri, Mar 07, 2003 at 03:03:16PM +0100, Markus Welsch wrote: > RAV Antivirus > (http://www.ravantivirus.com/pages/showproduct.php?p=21) Yes, it's a great Romanian AV software. But why not try a GPL software first -- ClamAV? Marcin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: anti virus software for mail server
On Friday 07 March 2003 14:03, Markus Welsch wrote: > Hi, > > I've found > > RAV Antivirus > (http://www.ravantivirus.com/pages/showproduct.php?p=21) > > > but I never heard of that one before! From the first view it looks amazing > - so if somebody has experience with that one post please! Of course also > post your personal recommendations. It is a bit pricy. I have used http://clamav.elektrapro.com/ with great sucess. Lot cheaper and works well. Take care - RL -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the sender. Any offers or quotation of service are subject to formal specification. Errors and omissions excepted. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of edNET or lightershade ltd. Finally, the recipient should check this email and any attachments for the presence of viruses. edNET and lightershade ltd accepts no liability for any damage caused by any virus transmitted by this email. -- -- Virus scanned by edNET. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
anti virus software for mail server
Hi, I've found RAV Antivirus (http://www.ravantivirus.com/pages/showproduct.php?p=21) but I never heard of that one before! From the first view it looks amazing - so if somebody has experience with that one post please! Of course also post your personal recommendations. As MTA I'm using Postfix 2.0 by the way ! Kind Regards, Markus Welsch -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Mail Server Authentication
Gentlemen - Sorry if I'm stepping into the middle of your conversation but I just finished installing cyrus-imap, postfix, & procmail. It is working - by the way. The article that I used to help me was in LinuxWorld. You can find the original article at www.linuxworld.com. In the first screen, enter IMAP in the search field. Currently, I am using passwd for my authentication but the last section of the article had some info that might be of help to you. Specifically, I would like to put ldap on my system. But that is another project for another day. Greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 05, 2003 4:39 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; debian-isp@lists.debian.org Subject: Re: Mail Server Authentication Hi Teun, had a look at the link Postfix is compiled with SASL, and Cyrus with SASL2 I dont want to use 2 'db' files to store the same usernames and passwords, and as I said, I dont want them in Mysql or /etc/passwd - hmmm... was hoping to find a package that I wouldnt have to maintain myself... On Fri, Feb 28, 2003 at 11:40:02PM +0100, [EMAIL PROTECTED] wrote: > http://people.debian.org/~hmh/ has a complete set of cyrus and postfix > packages backported from sid to woody. I use them on one of my personal Cheers Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Mail Server Authentication
Gentlemen - Sorry if I'm stepping into the middle of your conversation but I just finished installing cyrus-imap, postfix, & procmail. It is working - by the way. The article that I used to help me was in LinuxWorld. You can find the original article at www.linuxworld.com. In the first screen, enter IMAP in the search field. Currently, I am using passwd for my authentication but the last section of the article had some info that might be of help to you. Specifically, I would like to put ldap on my system. But that is another project for another day. Greg -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 05, 2003 4:39 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: Mail Server Authentication Hi Teun, had a look at the link Postfix is compiled with SASL, and Cyrus with SASL2 I dont want to use 2 'db' files to store the same usernames and passwords, and as I said, I dont want them in Mysql or /etc/passwd - hmmm... was hoping to find a package that I wouldnt have to maintain myself... On Fri, Feb 28, 2003 at 11:40:02PM +0100, [EMAIL PROTECTED] wrote: > http://people.debian.org/~hmh/ has a complete set of cyrus and postfix > packages backported from sid to woody. I use them on one of my personal Cheers Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail Server Authentication
Hi Teun, had a look at the link Postfix is compiled with SASL, and Cyrus with SASL2 I dont want to use 2 'db' files to store the same usernames and passwords, and as I said, I dont want them in Mysql or /etc/passwd - hmmm... was hoping to find a package that I wouldnt have to maintain myself... On Fri, Feb 28, 2003 at 11:40:02PM +0100, [EMAIL PROTECTED] wrote: > http://people.debian.org/~hmh/ has a complete set of cyrus and postfix > packages backported from sid to woody. I use them on one of my personal Cheers Andrew
Re: Mail Server Authentication
Hi Teun, had a look at the link Postfix is compiled with SASL, and Cyrus with SASL2 I dont want to use 2 'db' files to store the same usernames and passwords, and as I said, I dont want them in Mysql or /etc/passwd - hmmm... was hoping to find a package that I wouldnt have to maintain myself... On Fri, Feb 28, 2003 at 11:40:02PM +0100, [EMAIL PROTECTED] wrote: > http://people.debian.org/~hmh/ has a complete set of cyrus and postfix > packages backported from sid to woody. I use them on one of my personal Cheers Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail Server Authentication
- Original Message - From: <[EMAIL PROTECTED]> To: Cc: <[EMAIL PROTECTED]> Sent: Friday, February 28, 2003 10:03 PM Subject: Mail Server Authentication > Hi all, > > I am currently working on installing a new mail server for a small number of > users (50-100). > > I do NOT want the user account details stored in /etc/passwd, and shadow. > I want to be able to have the following mail addresses as seperate mailboxes. >[EMAIL PROTECTED] >[EMAIL PROTECTED] > > etc... > > Using a database such as postgresql or mysql seems overkill for such a small > number of users. Only three users on this box need shell accounts. > > I also need support for 'SMTP Auth' (tls) > > After some investigation, it seems that the 'best'/ easiest solution is to use > Cyrus and Postfix. > > The issue seemed to be that everyone had there own authentication method, and > Cyrus provides both IMAP and POP3 saving me the trouble of installing yet another > program. > > So therefore I tried to get it all up and running using the SASLDB. > > Unfortunately there seems to be no STABLE version of cyrus-sasl. > http://people.debian.org/~hmh/ has a complete set of cyrus and postfix packages backported from sid to woody. I use them on one of my personal boxes, and they work just fine. It's a postfix + cyrus + jawmail + mysql + spamassassin + amavis setup, also for a small amount of users. We also used it at the ISP I work for for a small mailserver for one of our customers, and it's also working ok. Hope this helps, Teun Vink Luna.nl
Mail Server Authentication
Hi all, I am currently working on installing a new mail server for a small number of users (50-100). I do NOT want the user account details stored in /etc/passwd, and shadow. I want to be able to have the following mail addresses as seperate mailboxes. [EMAIL PROTECTED] [EMAIL PROTECTED] etc... Using a database such as postgresql or mysql seems overkill for such a small number of users. Only three users on this box need shell accounts. I also need support for 'SMTP Auth' (tls) After some investigation, it seems that the 'best'/ easiest solution is to use Cyrus and Postfix. The issue seemed to be that everyone had there own authentication method, and Cyrus provides both IMAP and POP3 saving me the trouble of installing yet another program. So therefore I tried to get it all up and running using the SASLDB. Unfortunately there seems to be no STABLE version of cyrus-sasl. I don't want to start installing 'unstable' packages, as I have found it in the past to be a path with no return. Before I try and get it working, by compiling the packages myself, I wanted to know if anyone has this setup running. Does it work properly? Has anyone had strange experiences with the CYRUS maildir format? or should I just stick to 'sendmail, qpopper' and use /etc/passwd? Thanks for the thoughts Andrew
Re: Mail Server Authentication
- Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, February 28, 2003 10:03 PM Subject: Mail Server Authentication > Hi all, > > I am currently working on installing a new mail server for a small number of > users (50-100). > > I do NOT want the user account details stored in /etc/passwd, and shadow. > I want to be able to have the following mail addresses as seperate mailboxes. >[EMAIL PROTECTED] >[EMAIL PROTECTED] > > etc... > > Using a database such as postgresql or mysql seems overkill for such a small > number of users. Only three users on this box need shell accounts. > > I also need support for 'SMTP Auth' (tls) > > After some investigation, it seems that the 'best'/ easiest solution is to use > Cyrus and Postfix. > > The issue seemed to be that everyone had there own authentication method, and > Cyrus provides both IMAP and POP3 saving me the trouble of installing yet another > program. > > So therefore I tried to get it all up and running using the SASLDB. > > Unfortunately there seems to be no STABLE version of cyrus-sasl. > http://people.debian.org/~hmh/ has a complete set of cyrus and postfix packages backported from sid to woody. I use them on one of my personal boxes, and they work just fine. It's a postfix + cyrus + jawmail + mysql + spamassassin + amavis setup, also for a small amount of users. We also used it at the ISP I work for for a small mailserver for one of our customers, and it's also working ok. Hope this helps, Teun Vink Luna.nl -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Mail Server Authentication
Hi all, I am currently working on installing a new mail server for a small number of users (50-100). I do NOT want the user account details stored in /etc/passwd, and shadow. I want to be able to have the following mail addresses as seperate mailboxes. [EMAIL PROTECTED] [EMAIL PROTECTED] etc... Using a database such as postgresql or mysql seems overkill for such a small number of users. Only three users on this box need shell accounts. I also need support for 'SMTP Auth' (tls) After some investigation, it seems that the 'best'/ easiest solution is to use Cyrus and Postfix. The issue seemed to be that everyone had there own authentication method, and Cyrus provides both IMAP and POP3 saving me the trouble of installing yet another program. So therefore I tried to get it all up and running using the SASLDB. Unfortunately there seems to be no STABLE version of cyrus-sasl. I don't want to start installing 'unstable' packages, as I have found it in the past to be a path with no return. Before I try and get it working, by compiling the packages myself, I wanted to know if anyone has this setup running. Does it work properly? Has anyone had strange experiences with the CYRUS maildir format? or should I just stick to 'sendmail, qpopper' and use /etc/passwd? Thanks for the thoughts Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
On Tue, 2003-02-25 at 10:16, Jerome Lacoste (Frisurf) wrote: > [disclaimer: I am not a specialist in mail servers at all] > > I have installed James (check www.apache.org) on one machine and its > developers claim, if I remember correctly, to send several millions of > mails during their performance testing. what? per year? ;^) Sorry, couldn't resist. Hmmm. Mail servers. I add my voice to those recommending postfix - quite easy to configure, and very helpful people on the postfix mailing list (they really know what they are talking about). Your users will be very happy if you install a decent spamfilter - spamassassin is probably one of the best solutions, especially when 2.5 finally comes - just be sure that you never drop a mail without notice. Tag the mail as spam and let the users filter, or bounce it. If you have windows clients, a virus filter will be of some benefit, too (I don't have any recommendation there). cheers -- vbi -- featured link: http://fortytwo.ch/smtp signature.asc Description: This is a digitally signed message part
Re: Mail server
Russell Coker wrote: > > On Mon, 24 Feb 2003 18:34, Colin Ellis wrote: > > Email doesn't really need much processing, but does take > > surprisingly large amounts of disk space. > > Obviously such things differ depending on exactly who is > using the service and what they are doing. > > But my experience is that with modern disks a mail server > will run out of seek > performance before it runs out of space. > > [...] > > If a message delivery takes 10 disk writes (actually it > probably takes more > once you count writing to two files in the queue then writing > it to the spool > and deleting the queue files with lots of fsync() along the > way) then such a > machine can only deliver 13 messages per second. > > I have been considering modifying the Qmail and maildrop code > to not use > fsync() etc to allow more users per server (yes I know about > the reliability > issues, but there are lots of more important things to worry about). Well, qmail is an I/O hog. We have a (small) list-server at a customer which was set up with qmail (w/ el-cheapo 20 GB IDE HDDs). Could only send at ~512 kbit. Then replaced qmail with postfix, now it saturates the customer's T1 without problems... >From my experience, you should use a hardware raid controller w/ (at least) 1 UPM SCSI disks, and postfix+courier imap. CPU power should be no problem, it's seek I/O that matters. Just my 0.02 Euros Thomas
Re: Mail server
[disclaimer: I am not a specialist in mail servers at all] I have installed James (check www.apache.org) on one machine and its developers claim, if I remember correctly, to send several millions of mails during their performance testing. I found it really easy to administrate and I am using MySQL for back-end. The tool is written in Java, so it might not be as fast as other mail servers, but to serve one thousand users, that should be largely sufficient. Cheers, Jerome On Mon, 2003-02-24 at 17:27, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. > > -- > Asher Densmore-Lynn <[EMAIL PROTECTED]> -- Jerome Lacoste (Frisurf) <[EMAIL PROTECTED]> CoffeeBreaks
Re: Mail server
On Tue, 2003-02-25 at 10:16, Jerome Lacoste (Frisurf) wrote: > [disclaimer: I am not a specialist in mail servers at all] > > I have installed James (check www.apache.org) on one machine and its > developers claim, if I remember correctly, to send several millions of > mails during their performance testing. what? per year? ;^) Sorry, couldn't resist. Hmmm. Mail servers. I add my voice to those recommending postfix - quite easy to configure, and very helpful people on the postfix mailing list (they really know what they are talking about). Your users will be very happy if you install a decent spamfilter - spamassassin is probably one of the best solutions, especially when 2.5 finally comes - just be sure that you never drop a mail without notice. Tag the mail as spam and let the users filter, or bounce it. If you have windows clients, a virus filter will be of some benefit, too (I don't have any recommendation there). cheers -- vbi -- featured link: http://fortytwo.ch/smtp signature.asc Description: This is a digitally signed message part
Re: Mail server
Russell Coker wrote: > > On Mon, 24 Feb 2003 18:34, Colin Ellis wrote: > > Email doesn't really need much processing, but does take > > surprisingly large amounts of disk space. > > Obviously such things differ depending on exactly who is > using the service and what they are doing. > > But my experience is that with modern disks a mail server > will run out of seek > performance before it runs out of space. > > [...] > > If a message delivery takes 10 disk writes (actually it > probably takes more > once you count writing to two files in the queue then writing > it to the spool > and deleting the queue files with lots of fsync() along the > way) then such a > machine can only deliver 13 messages per second. > > I have been considering modifying the Qmail and maildrop code > to not use > fsync() etc to allow more users per server (yes I know about > the reliability > issues, but there are lots of more important things to worry about). Well, qmail is an I/O hog. We have a (small) list-server at a customer which was set up with qmail (w/ el-cheapo 20 GB IDE HDDs). Could only send at ~512 kbit. Then replaced qmail with postfix, now it saturates the customer's T1 without problems... >From my experience, you should use a hardware raid controller w/ (at least) 1 UPM SCSI disks, and postfix+courier imap. CPU power should be no problem, it's seek I/O that matters. Just my 0.02 Euros Thomas -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
[disclaimer: I am not a specialist in mail servers at all] I have installed James (check www.apache.org) on one machine and its developers claim, if I remember correctly, to send several millions of mails during their performance testing. I found it really easy to administrate and I am using MySQL for back-end. The tool is written in Java, so it might not be as fast as other mail servers, but to serve one thousand users, that should be largely sufficient. Cheers, Jerome On Mon, 2003-02-24 at 17:27, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. > > -- > Asher Densmore-Lynn <[EMAIL PROTECTED]> -- Jerome Lacoste (Frisurf) <[EMAIL PROTECTED]> CoffeeBreaks -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
On Mon, Feb 24, 2003 at 10:27:56AM -0600, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. pretty nearly any relatively "modern" (as in less than 5 years old) machine will be more than capable of handling mail for 1000 users. spend between $500 and $1000 USD on a decent new machine and you'll have no problems. pay attention to the brand/model of the motherboard and the disk drive(s), they are the most important components. this won't give you any crash-proofing or crash-recovery - for that you need RAID 1, 0+1 or 5 disk (it's the only form of "backup" that is any use at all for extremely transient data like email)...which will add significantly to the price. my preference is for RAID-5 with a large non-volatile write-cache...very fast & very safe. craig -- craig sanders <[EMAIL PROTECTED]> Fabricati Diem, PVNC. -- motto of the Ankh-Morpork City Watch
Re: Mail server
On Mon, Feb 24, 2003 at 10:27:56AM -0600, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. pretty nearly any relatively "modern" (as in less than 5 years old) machine will be more than capable of handling mail for 1000 users. spend between $500 and $1000 USD on a decent new machine and you'll have no problems. pay attention to the brand/model of the motherboard and the disk drive(s), they are the most important components. this won't give you any crash-proofing or crash-recovery - for that you need RAID 1, 0+1 or 5 disk (it's the only form of "backup" that is any use at all for extremely transient data like email)...which will add significantly to the price. my preference is for RAID-5 with a large non-volatile write-cache...very fast & very safe. craig -- craig sanders <[EMAIL PROTECTED]> Fabricati Diem, PVNC. -- motto of the Ankh-Morpork City Watch -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
Lauchlin Wilkinson dijo: > As I said, the most cpu hungry app is the spam filtering. Try Amavis on top of that! ;-) -- .''`. Girl, you gotta change your crazy ways, you hear me? : :' :Crazy by Aerosmith `. `'Proudly running Debian GNU/Linux (Sid + 2.4.20 + Ext3) `-www.amayita.com www.malapecora.com www.chicasduras.com
Re: Mail server
We have one machine that is currently handleing about that many users. It runs Debian 3.0 stable, sendmail, spamassassin (if anyone has a better spam fillter let me know), imap and pop, and the load average is rarely above 0.7. Most of the load comes from spamassassin. Which seems to be normal. At the moment that machine is a Duron 900 with 60GB worth of disk space adn 750MB RAM. 60GB is complete overkill for only 1000 users unless you are planing on giving them huge mail boxes. Which I wouldn't advise. Personaly I run cucipop because it seems a very fast pop server. At the moment I am running uw-imapd as we have few inap clients and the sposed speed isues that that server have I have not noticed. As I said, the most cpu hungry app is the spam filtering. Lauch On Tue, 2003-02-25 at 03:27, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. > > -- > Asher Densmore-Lynn <[EMAIL PROTECTED]> >
Mail server
That's exactly what I needed to hear. I appreciate the prompt replies. Thank you. -- Asher Densmore-Lynn <[EMAIL PROTECTED]>
Re: Mail server
On Mon, 24 Feb 2003 20:59, Rich Puhek wrote: > Russell Coker wrote: > > I have been considering modifying the Qmail and maildrop code to not use > > fsync() etc to allow more users per server (yes I know about the > > reliability issues, but there are lots of more important things to worry > > about). > > Are you using mboxes under /var/spool/mail, or are you using Maildirs > under /home? Maildir's in home directories on a file system dedicated for the task. > If you're using the latter, wouldn't it be easier (and safer) to spread > your home dirs across multiple hard drives (or, more appropriately, > multiple RAID partitions on different disks?) Of course, IIRC, the 2650 > is a 2U server, so you're limited to what you can cram into the box. The 2650 contains 5 hard drives, that's a RAID-5 of 4 disks plus one hot-spare disk. Therefore only one partition for all the storage. > In your particular configuration, have you looked at the > advantages/disadvantages of having something like two disks in RAID 1 > and another 2 or more disks in another RAID set (1 or 5, depending on # > of drives) with the mail spool on one RAID set and the rest of the > filesystems (including /var) on the other? For only 4 active disks I don't expect any great performance benefit from that, and probably a performance loss at times when one array is busy and the other is idle. For 10+ disks I would probably look at a RAID-1 for the spool with the journal on a nvram device and the rest of the disks in a RAID-5 for storage. > Just asking because I have a similar setup to yours (one big HW RAID-5) > and have been wondering if that's the best way to go. If you have an excessive number of disks in the RAID-5 then the OS may not be able to send enough IO requests to it. I don't think that file systems in Linux (with the possible exception of XFS) could deliver good performance on a RAID array of 100 disks. Delivering good performance on 10 file systems that each have 10 disks is much easier to achieve if your data store can easily be striped over 10 file systems (as it can be for mail). A previous mail server I worked on had 192 disks divided into 10 RAID sets for mail storage for this reason. I am not sure how many of the 192 disks were used and how many were spare. I suspect that it was 180 disks in use and 12 spare. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page
Re: Mail server
Lauchlin Wilkinson dijo: > As I said, the most cpu hungry app is the spam filtering. Try Amavis on top of that! ;-) -- .''`. Girl, you gotta change your crazy ways, you hear me? : :' :Crazy by Aerosmith `. `'Proudly running Debian GNU/Linux (Sid + 2.4.20 + Ext3) `-www.amayita.com www.malapecora.com www.chicasduras.com -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
We have one machine that is currently handleing about that many users. It runs Debian 3.0 stable, sendmail, spamassassin (if anyone has a better spam fillter let me know), imap and pop, and the load average is rarely above 0.7. Most of the load comes from spamassassin. Which seems to be normal. At the moment that machine is a Duron 900 with 60GB worth of disk space adn 750MB RAM. 60GB is complete overkill for only 1000 users unless you are planing on giving them huge mail boxes. Which I wouldn't advise. Personaly I run cucipop because it seems a very fast pop server. At the moment I am running uw-imapd as we have few inap clients and the sposed speed isues that that server have I have not noticed. As I said, the most cpu hungry app is the spam filtering. Lauch On Tue, 2003-02-25 at 03:27, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. > > -- > Asher Densmore-Lynn <[EMAIL PROTECTED]> > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Mail server
That's exactly what I needed to hear. I appreciate the prompt replies. Thank you. -- Asher Densmore-Lynn <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
On Mon, 24 Feb 2003 20:59, Rich Puhek wrote: > Russell Coker wrote: > > I have been considering modifying the Qmail and maildrop code to not use > > fsync() etc to allow more users per server (yes I know about the > > reliability issues, but there are lots of more important things to worry > > about). > > Are you using mboxes under /var/spool/mail, or are you using Maildirs > under /home? Maildir's in home directories on a file system dedicated for the task. > If you're using the latter, wouldn't it be easier (and safer) to spread > your home dirs across multiple hard drives (or, more appropriately, > multiple RAID partitions on different disks?) Of course, IIRC, the 2650 > is a 2U server, so you're limited to what you can cram into the box. The 2650 contains 5 hard drives, that's a RAID-5 of 4 disks plus one hot-spare disk. Therefore only one partition for all the storage. > In your particular configuration, have you looked at the > advantages/disadvantages of having something like two disks in RAID 1 > and another 2 or more disks in another RAID set (1 or 5, depending on # > of drives) with the mail spool on one RAID set and the rest of the > filesystems (including /var) on the other? For only 4 active disks I don't expect any great performance benefit from that, and probably a performance loss at times when one array is busy and the other is idle. For 10+ disks I would probably look at a RAID-1 for the spool with the journal on a nvram device and the rest of the disks in a RAID-5 for storage. > Just asking because I have a similar setup to yours (one big HW RAID-5) > and have been wondering if that's the best way to go. If you have an excessive number of disks in the RAID-5 then the OS may not be able to send enough IO requests to it. I don't think that file systems in Linux (with the possible exception of XFS) could deliver good performance on a RAID array of 100 disks. Delivering good performance on 10 file systems that each have 10 disks is much easier to achieve if your data store can easily be striped over 10 file systems (as it can be for mail). A previous mail server I worked on had 192 disks divided into 10 RAID sets for mail storage for this reason. I am not sure how many of the 192 disks were used and how many were spare. I suspect that it was 180 disks in use and 12 spare. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
- Original Message - From: "Russell Coker" <[EMAIL PROTECTED]> To: "Colin Ellis" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, February 24, 2003 7:16 PM Subject: Re: Mail server > > If a message delivery takes 10 disk writes (actually it probably takes more > once you count writing to two files in the queue then writing it to the spool > and deleting the queue files with lots of fsync() along the way) then such a > machine can only deliver 13 messages per second. > > I'm running a number of mail servers with lots of spare disk space that are > hitting the message delivery limits, which prevents me adding more users. > I totally agree with Russel; disk speed is probably the most important limiting factor, not CPU speed or diskspace. To add some more numbers: I've just been doing some benchmarks to test different filesystem/mailserver combinations, testing with Russel's excellent Postal benchmark program. The best result on our testmachine (celeron 1700, 256 megs of RAM, 80 GB 7200 rpm IDE disk) have been a constant 30-35 messages per second. This was with a combination of XFS, Exim and Maildir storage, and with a maximum message size of 10K. A more realistic 100K maximum size still resulted in about 20-25 deliveries per second. These numbers are, however, only for mail delivery using SMTP; retrieving the mail using either POP or IMAP will add significant load. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
Russell Coker wrote: I have been considering modifying the Qmail and maildrop code to not use fsync() etc to allow more users per server (yes I know about the reliability issues, but there are lots of more important things to worry about). Are you using mboxes under /var/spool/mail, or are you using Maildirs under /home? If you're using the latter, wouldn't it be easier (and safer) to spread your home dirs across multiple hard drives (or, more appropriately, multiple RAID partitions on different disks?) Of course, IIRC, the 2650 is a 2U server, so you're limited to what you can cram into the box. In your particular configuration, have you looked at the advantages/disadvantages of having something like two disks in RAID 1 and another 2 or more disks in another RAID set (1 or 5, depending on # of drives) with the mail spool on one RAID set and the rest of the filesystems (including /var) on the other? Just asking because I have a similar setup to yours (one big HW RAID-5) and have been wondering if that's the best way to go. --Rich _ Rich Puhek ETN Systems Inc. 2125 1st Ave East Hibbing MN 55746 tel: 218.262.1130 email: [EMAIL PROTECTED] _ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
Asher Densmore-Lynn wrote: Can anyone give me any figures on how much machine I need to serve as a mail server for N users? I appreciate that every server is unique, but I can't judge these things for the life of me, and if I had baseline numbers I could modify them to suit. \: I'm looking at a thousand users, but anything would help. Depends more on the software than on the numer of users. And the number of users isn't really interesting. It's interesting how much traffic they generate. I was running sendmail+popper on a P2-500MHz, 512MB RAM with some users popping every minute - about 1 mails in/minute and 10 pop-connections/minute and had a load-average of about 1.0 - and in times with much bounces up to 20. Now we're running postfix with courier-pop/imap, AntiVir, Spamfilter on a P4-1.7GHz with 512MB RAM and an IPC-Vortex-SCSI-RAID-Controller for the spool. Also installed is a webmail, the User-Database comes from LDAP (also running local) and we have a load of nearly 0 - and slightly more traffic. I'd suggest you use qmail or postfix. On the postfix-mailinglist are some people with a _lot_ of traffic (thousands of messages / minute) and they handle this also with something with about 1GHz - mail-delivery isn't really a CPU-issue, it's highly I/O-based so fast disk give you much more performance than a faster CPU. regards -- \\\ ||| /// _\=/_ ( @ @ )(o o) +oOOo-(_)-oOOo--oOOo-(_)-oOOo--+ | Markus Schabel TGM - Die Schule der Technik www.tgm.ac.at | | IT-Service A-1200 Wien, Wexstrasse 19-23 net.tgm.ac.at | | [EMAIL PROTECTED] Tel.: +43(1)33126/316 | | [EMAIL PROTECTED] Fax.: +43(1)33126/154 | | FSF Associate Member #597, Linux User #259595 (counter.li.org) | |oOOoYet Another Spam Trap: oOOo | | ()oOOo[EMAIL PROTECTED] ( ) oOOo | +\ (( )--\ ( -( )-+ \_) ) /\_) ) / (_/ (_/ Computers are like airconditioners: They stop working properly if you open windows. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
On Mon, 24 Feb 2003 18:34, Colin Ellis wrote: > Email doesn't really need much processing, but does take surprisingly large > amounts of disk space. Obviously such things differ depending on exactly who is using the service and what they are doing. But my experience is that with modern disks a mail server will run out of seek performance before it runs out of space. The fastest drives (15000rpm) will take an average of 4ms for the disk to spin to the correct location to start a transfer in addition to the seek times for moving the heads. That gives a performance of something less than 100 IO operations per second per disk. I am working on a bunch of Dell PowerEdge 2650 machines with 4*U160 15000rpm SCSI disks in a hardware RAID-5 with a battery backed write-back cache. This gives a peak performance of about 130 disk writes per second. If a message delivery takes 10 disk writes (actually it probably takes more once you count writing to two files in the queue then writing it to the spool and deleting the queue files with lots of fsync() along the way) then such a machine can only deliver 13 messages per second. I'm running a number of mail servers with lots of spare disk space that are hitting the message delivery limits, which prevents me adding more users. I have been considering modifying the Qmail and maildrop code to not use fsync() etc to allow more users per server (yes I know about the reliability issues, but there are lots of more important things to worry about). If you need more space then there's lots of good options nowadays. 200G IDE drives are getting cheap, I'll probably get a RAID-1 of them for my next home machine. 70G U160 SCSI drives give better performance, and I'm finding that their performance is a bottleneck not their size. Of course bigger drives tend to be faster if all other things are equal. For the servers I'm using I'd rather have 140G U160 drives, I'd still be using <70G of them, but the performance would be better. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
Asher Densmore-Lynn wrote: Can anyone give me any figures on how much machine I need to serve as a mail server for N users? I appreciate that every server is unique, but I can't judge these things for the life of me, and if I had baseline numbers I could modify them to suit. \: I'm looking at a thousand users, but anything would help. how long is a pice of string? a p120 with 32meg of ram can handle 30 users with ease. A p2-350 with 128 meg 200 with ease, depends on the use its put to. I doubt its linear scaling, give us some numbers. Thing -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
On Mon, 24 Feb 2003 17:27, Asher Densmore-Lynn wrote: > Can anyone give me any figures on how much machine I need to serve as a > mail server for N users? > > I appreciate that every server is unique, but I can't judge these things > for the life of me, and if I had baseline numbers I could modify them to > suit. \: > > I'm looking at a thousand users, but anything would help. It depends on who those users are and what they do. For 1000 users of a dial-up ISP you don't need anything special, no-one sells hardware that is so small it can't handle such a load. For 1000 users of a corporate LAN attaching Word and PowerPoint documents to their email you'll need a fairly decent server, get a couple of gigs of RAM and 4-5 disks in a RAID array and it should be fine. -- http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark http://www.coker.com.au/postal/Postal SMTP/POP benchmark http://www.coker.com.au/~russell/ My home page -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Mail server
If its of any help, at my last firm, we had 1000 email domains all using different setup's their were 900 pop accounts checking their mail every 5 - 10 mins our set up was Sendmail 8.11 Debian 3.0 kernel 2.4.18 intel 550Mhz 256Mb Ram 40Gb Hd Machine load never above 0.7 Asher Densmore-Lynn wrote: Can anyone give me any figures on how much machine I need to serve as a mail server for N users? I appreciate that every server is unique, but I can't judge these things for the life of me, and if I had baseline numbers I could modify them to suit. \: I'm looking at a thousand users, but anything would help. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Mail server
Your question is certainly quite vague, but here are a few things to think about.. What mail delivery program are you thinking of using and are you planning on providing pop3 and/or imap service? Imap requires more processing power to display the mail folders, but it depends on the software again. What kind of disk quota are you thinking of setting for your users? Email can take up a lot of space, and outgoing mail also needs to be stored in a queue. In terms of processing/memory requirements, I'd suggest pentium II (400MHz) upwards with at least 512MB ram. Email doesn't really need much processing, but does take surprisingly large amounts of disk space. The disks are probably the limiting factor in what hardware config you are looking at. Hope this helps, Colin Ellis Solution City Ltd http://www.solution-city.com -Original Message- From: Asher Densmore-Lynn [mailto:[EMAIL PROTECTED] Sent: 24 February 2003 16:28 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Mail server Can anyone give me any figures on how much machine I need to serve as a mail server for N users? I appreciate that every server is unique, but I can't judge these things for the life of me, and if I had baseline numbers I could modify them to suit. \: I'm looking at a thousand users, but anything would help. -- Asher Densmore-Lynn <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Mail server
Can anyone give me any figures on how much machine I need to serve as a mail server for N users? I appreciate that every server is unique, but I can't judge these things for the life of me, and if I had baseline numbers I could modify them to suit. \: I'm looking at a thousand users, but anything would help. -- Asher Densmore-Lynn <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Economy Mail Server - need advice :)
G'day You can run a fairly nice setup with a low-end machine. The biggest cpu hogs on a mailserver of what I have seen have been the pop server.. make sure you go with a mailserver that uses maildir. We use postfix here, but qmail should be nice and even good old sendmail works fine with the right delivery agent. But both qmail and postfix are easy to setup.. as for pop/imap we use courier here, it works well and isnt that slow either.. as for storage, 3GB on 400 users should be sufficient, it depends on how much mail you allow your users to store.. if they store too much mails your filesystem choice begins to matter as well, as for example current ext2 totally bogs down with over 3000 files in a directory.. and yes, we have seen email users leaving that amount in their boxes.. it's amazing how much you can cram in on 5MB :-) Anyway, what matters mostly is your user patterns.. If they are modem users that box will probably do with a little more ram and HDD.. if they are broadband/fiber users you will need to upgrade... Regards Roger Abrahamsson Michael Kean wrote: G'day all! For the last 5 years I've been running a 33.6K ISP. It's now time to upgrade. In the process I intend to change my isp name, and hopefully either build my own mail server or use someone else's. My Happy but tiny Debian box on a 686-PR200 running 150MHz with 64M RAM has been running a breed of radius, apache and squid. With roughly 400 users on the books I am quite sure my 3 Gig HDD is not going to be big enough. (perhaps it would be close if I kill squid and enable limits??) However, is the CPU and RAM sufficient to run a mail server, or is it really upgrade time. I have never set up an email server either - so am open to suggestions as to what's best to use. I have heard good reports of SpamAssassin as well, and wouldn't mind integrating that; perhaps as a later date. I may even need support from someone - so am potentially open to offers. Thanks for your time :) Debian is certainly a hell of a lot more hackerproof than RedHat was :) Cheers, Michael Kean. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Economy Mail Server - need advice :)
G'day all! For the last 5 years I've been running a 33.6K ISP. It's now time to upgrade. In the process I intend to change my isp name, and hopefully either build my own mail server or use someone else's. My Happy but tiny Debian box on a 686-PR200 running 150MHz with 64M RAM has been running a breed of radius, apache and squid. With roughly 400 users on the books I am quite sure my 3 Gig HDD is not going to be big enough. (perhaps it would be close if I kill squid and enable limits??) However, is the CPU and RAM sufficient to run a mail server, or is it really upgrade time. I have never set up an email server either - so am open to suggestions as to what's best to use. I have heard good reports of SpamAssassin as well, and wouldn't mind integrating that; perhaps as a later date. I may even need support from someone - so am potentially open to offers. Thanks for your time :) Debian is certainly a hell of a lot more hackerproof than RedHat was :) Cheers, Michael Kean. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Economy Mail Server - need advice :)
G'day You can run a fairly nice setup with a low-end machine. The biggest cpu hogs on a mailserver of what I have seen have been the pop server.. make sure you go with a mailserver that uses maildir. We use postfix here, but qmail should be nice and even good old sendmail works fine with the right delivery agent. But both qmail and postfix are easy to setup.. as for pop/imap we use courier here, it works well and isnt that slow either.. as for storage, 3GB on 400 users should be sufficient, it depends on how much mail you allow your users to store.. if they store too much mails your filesystem choice begins to matter as well, as for example current ext2 totally bogs down with over 3000 files in a directory.. and yes, we have seen email users leaving that amount in their boxes.. it's amazing how much you can cram in on 5MB :-) Anyway, what matters mostly is your user patterns.. If they are modem users that box will probably do with a little more ram and HDD.. if they are broadband/fiber users you will need to upgrade... Regards Roger Abrahamsson Michael Kean wrote: >G'day all! > >For the last 5 years I've been running a 33.6K ISP. It's now time to >upgrade. In the process I intend to change my isp name, and hopefully >either build my own mail server or use someone else's. > >My Happy but tiny Debian box on a 686-PR200 running 150MHz with 64M RAM has >been running a breed of radius, apache and squid. > >With roughly 400 users on the books I am quite sure my 3 Gig HDD is not >going to be big enough. (perhaps it would be close if I kill squid and >enable limits??) However, is the CPU and RAM sufficient to run a mail >server, or is it really upgrade time. > >I have never set up an email server either - so am open to suggestions as to >what's best to use. I have heard good reports of SpamAssassin as well, and >wouldn't mind integrating that; perhaps as a later date. I may even need >support from someone - so am potentially open to offers. > >Thanks for your time :) Debian is certainly a hell of a lot more hackerproof >than RedHat was :) > >Cheers, Michael Kean. > > > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
