Re: [Declude.JunkMail] Re: Outbound weight
Your weight ranges are set fine. There is nothing wrong with the syntax of those. To be certain you only have weight ranges defined once right? Correct, inbound scanning has been working fine for years ... it is outbound scanning that seems to take the weight and mark the message IGNORE instead of DELETE ... did I define it correctly below, I know the WEIGHT10 DELETE for inbound is defined in $junkmail, but was told by Declude support to put the WEIGHT10 DELETE in the global.cfg for outbound mail. Did I misunderstood? I think I just fiqured out my problem by looking at the debug log WEIGHT10 does delete outbound since it is defined, but I never defined WEIGHT40 so that was ignored.I needed to add a line that now says WEIGHT10 DELETE WEIGHT40 DELETE for the outbound in global.cfg Does this sound right? .I know I'm doing something wrong ... I have the following in my global.cfg at the end WEIGHT10weightrangexx1039 WEIGHT40weightxx400 #CATCHALLMAILS catchallmails x x 0 0 # # The actions listed below only apply to outgoing E-mail, and only if you # have the "Pro" version. Note that the DUL and OSDUL tests should NOT # be used to block outgoing mail! # WEIGHT10 DELETE My debug file starts as: 12/21/2007 22:28:48.670 qa07700ce3427.smd Log Level set to DEBUG 12/21/2007 22:28:48.670 qa07700ce3427.smd CFG: Setting LOG_OK level to NONE 12/21/2007 22:28:48.670 qa07700ce3427.smd CFG: Set hop to 0. 12/21/2007 22:28:48.670 qa07700ce3427.smd CFG: Setting OUTBOUNDSCANNINGSPAM to ON 12/21/2007 22:28:48.670 qa07700ce3427.smd CFG: Setting INBOUNDSCANNINGSPAM to ON 12/21/2007 22:28:48.670 qa07700ce3427.smd CFG: Setting XSENDER to ON 12/21/2007 22:28:48.670 qa07700ce3427.smd External test weighting set to 0 (antiweight 0) 12/21/2007 22:28:48.670 qa07700ce3427.smd External test weighting set to 10 (antiweight 0) 12/21/2007 22:28:48.670 qa07700ce3427.smd Declude v4.3.46 for IMail 12/21/2007 22:28:48.685 qa07800e33428.smd CFG: Setting LOG_OK level to NONE 12/21/2007 22:28:48.685 qa07800e33428.smd CFG: Set hop to 0. 12/21/2007 22:28:48.685 qa07800e33428.smd CFG: Setting OUTBOUNDSCANNINGSPAM to ON 12/21/2007 22:28:48.685 qa07800e33428.smd CFG: Setting INBOUNDSCANNINGSPAM to ON 12/21/2007 22:28:48.685 qa07800e33428.smd CFG: Setting XSENDER to ON 12/21/2007 22:28:48.685 qa07800e33428.smd External test weighting set to 0 (antiweight 0) 12/21/2007 22:28:48.685 qa07800e33428.smd External test weighting set to 10 (antiweight 0) But an example message that is not being deleted is: --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Re: Outbound weight
Your weight ranges are set fine. There is nothing wrong with the syntax of those. To be certain you only have weight ranges defined once right? Can you throw your logs into debug and send a test outbound message through. We will be able to help you better seeing this output. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. David Dodell wrote: Are you sure your scanning outbound mail? Their is a directive that needs to be turned on for it to work. By default its off. Yes, I do have that line turned ON Do I have my weight defined correctly in the global.cfg that I have defined below? David Dodell wrote: I know I'm doing something wrong ... I have the following in my global.cfg at the end WEIGHT10weightrangexx1039 WEIGHT40weightxx400 #CATCHALLMAILS catchallmails x x 0 0 # # The actions listed below only apply to outgoing E-mail, and only if you # have the "Pro" version. Note that the DUL and OSDUL tests should NOT # be used to block outgoing mail! # WEIGHT10 DELETE --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Re: Outbound weight
Are you sure your scanning outbound mail? Their is a directive that needs to be turned on for it to work. By default its off. Yes, I do have that line turned ON Do I have my weight defined correctly in the global.cfg that I have defined below? David Dodell wrote: I know I'm doing something wrong ... I have the following in my global.cfg at the end WEIGHT10weightrangexx1039 WEIGHT40weightxx400 #CATCHALLMAILS catchallmails x x 0 0 # # The actions listed below only apply to outgoing E-mail, and only if you # have the "Pro" version. Note that the DUL and OSDUL tests should NOT # be used to block outgoing mail! # WEIGHT10 DELETE --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Outbound weight
Are you sure your scanning outbound mail? Their is a directive that needs to be turned on for it to work. By default its off. JM ADD Spam checking for inbound/outbound scanning can be turned on/off. Located as a directive in the global.cfg file, below are the default settings. OUTBOUNDSCANNINGSPAMOFF INBOUNDSCANNINGSPAM ON Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. David Dodell wrote: I know I'm doing something wrong ... I have the following in my global.cfg at the end WEIGHT10weightrangexx1039 WEIGHT40weightxx400 #CATCHALLMAILS catchallmails x x 0 0 # # The actions listed below only apply to outgoing E-mail, and only if you # have the "Pro" version. Note that the DUL and OSDUL tests should NOT # be used to block outgoing mail! # WEIGHT10 DELETE - But outbound email is not being caught and deleted ... is the second WEIGHT statement suppose to be configured differently for outbound? My inbound weights are working perfectly. David --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Outbound weight
I know I'm doing something wrong ... I have the following in my global.cfg at the end WEIGHT10weightrangexx1039 WEIGHT40weightxx400 #CATCHALLMAILS catchallmails x x 0 0 # # The actions listed below only apply to outgoing E-mail, and only if you # have the "Pro" version. Note that the DUL and OSDUL tests should NOT # be used to block outgoing mail! # WEIGHT10 DELETE - But outbound email is not being caught and deleted ... is the second WEIGHT statement suppose to be configured differently for outbound? My inbound weights are working perfectly. David --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hardware Upgrade
I mostly concur with Andrew here, but let me add some specifics. 1) *Memory* - for the 5000 series of chips using FB-DIMMs you need 4 total sticks to max out the memory bandwidth. 4 gets you twice the memory bandwidth of 2, though you can use just 2. The real-world benchmarks show maybe a 5% improvement, though this depends largely on what you are doing. I'm not aware of any advantage to getting faster memory as I believe these systems will run the memory at the speed dictated by the processors. The amount of memory for this particular application will depend on how many cores you have. I would do 2GB with 4 cores, and 4GB with 8 cores, but only if you are going to be pushing hard on them (and you probably won't be). 2) *CPU* - You should be fine with just 4 cores, in fact Windows will not likely be able to max out 8 cores with Declude due to heap issues (limitations in memory allocations). I run 8 x 1.86 Ghz cores and I start getting a lot of errors if I press the system to 100% from Declude, which with my config is somewhere between 150 and 200 messages being scanned concurrently. How much load per message will depend on what you are running in your Declude config. Mine is rather heavy, though I still couldn't get more out of the server in terms of total utilization due to the heap issues, though the messages would process more quickly with a lighter config. So I would guess that with 4 x 2.33 Ghz cores, you could do about 100 concurrent messages. Also take note that there are lower wattage quad-core Xeons out now that begin with "L". These run about 50 Watts instead of 80 Watts for the standard quads. This does add up, especially when you consider that cooling and other supportive processes will at least 1 to 2 times that amount of power for what the server actually uses. If you pay your own power bills, the "L" series processors should pay for themselves. 3) *Disk and RAID* - SATA is the way to go. Try to stay away from the 2.5" drives if you can. Modern SATA controllers can handle RAID 5 without a bottleneck, and on a 4 drive system with a modern RAID controller, RAID 5 will definitely outperform RAID 10. I recommend 3Ware 9550sx controllers, but you should be safe with any SATA II controller that supports a battery backup for the cache. I would stay away from zero-channel RAID cards, and definitely anything that is host RAID or software RAID because they are much more likely to require physical intervention in the event of a drive failure. There is no need to separate the OS onto a different drive system for this purpose. I would get 250 GB drives since they will initialize faster and the extra space likely isn't needed. I run my 8 core system on a 4 drive RAID 5 array with SATA II drives and it works great. 4) *Pre-scanning Gateway* - Most Declude servers will save between 30% and 50% CPU utilization by adding an Alligate server in front of it (much more if you have catch-alls or aren't doing address verification at all). You will also block significantly more spam that way, especially the zombie stuff. I have helped many set up Alligate, and we can even host a backup server or set something up as a test if you were interested. Alligate doesn't require a lot of processing power, though the system needs to be a stand-alone system. Even a single-core server with a single drive would handle this great, though it makes sense to have a backup. Note that out of the box Alligate won't do near what it can when configured by an experienced administrator, and you can block a ton of spam and other attacks with virtually no false positives (definitely +99.99% accuracy is possible while rejecting over 80% of all connection traffic). There is another hidden benefit to using Alligate; many of the killer messages that can affect both Declude and IMail are stopped by a properly configured Alligate pre-scanning gateway, and virtually all of the automatically-spreading viruses too. Matt Colbeck, Andrew wrote: Hello, Serge. I'm happy to chime in here, but let me start off with saying that you will get divergent opinions here, and that nobody will be absolutely right, as our answers are coloured by own experiences, and each implementation is unique. I'll also start off with asking you for your current and your intended message volumes, general architecture and software mix. Answering these details will help you keep the arguments comparing apples to apples because what is true for one respondent with low volume will not be true for another respondent with crushingly high volumes! My answers: 1- Memory I used to agonize over the making the exact right decision regarding slots, interleaving and multipliers; my truth *now* is that these are tweaks that make 2% to 6% of the raw memory speed in benchmarks and that it makes precious little difference in the real world for, say, an email server. Memory is relatively cheap; buy as
RE: [Declude.JunkMail] Hardware Upgrade
Processing email is more CPU and memory and storage driven than seen with databases. Yes, there is a lot of I/O, but that is fairly small footprints (unless you have a lot of IMAP or webmail users with lots of very large mail boxes) which is easily handled by modern hard drive, speed depending upon overall volume. Memory: Go with 4 GB if you can, not worry so much about the best speed. For example, if 2 GB of the fastest is priced similar to 4 GB of the next speed down, you will get more bang for your buck with the 4 GB. Spool partition: Get the fastest drives you can afford but do not go over board. SCSI 15K drives would be over kill, but SATA II would be great. Either way, try for 10K drives. Hard drives: For an email server like Imail, SATA II drives will do just fine. If your email volume is that great that you need every bit of performance you can get, you are better off splitting the load between servers, such as using gateway servers for primary filtering. Yes, SCSI Ultra 320 15K drives are the best and most solid performers, but you really do not have to have them. Partitions: I would go with 3 sets of mirrored SATA II 10K drives as follows; Mirror1 partition1 system, Mirror1 partition2 pagefile, Mirror2 parition1 spool, Mirror3 single partition mailboxes. On Mirror1 and Mirror2, you will have room for a couple of extra partitions for say logs, administrative and such. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge > Sent: Friday, December 21, 2007 1:41 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Hardware Upgrade > > Hi > > We are planning a hardware upgrade for february, after 5 years on the > previous ML370G2 > We will buy a 2slot QuadXeon Motherboard, 1.333FSB, and 2x2.33GHz QuadXeon, > 2GB DDR2 and have some technichal questions for the resident techies > 1- Should we get the fastest memory available, or should the memory speed be > a divider of 1333 or 2.33 ? > 2- Does a mail server realy need SCSI or SAS @15K/Minute ? or regular SATA @ > 7K or 10K enough ? > 3- We are planning on using : > 2 HD in Raid1 for System > 2 HD in Raid1 for Mailboxes > 2 HD in Raid1 for Spool > Where should we put the virtual Memory ? > Or, is it better to have > 2 HD in Raid1 for System > 2 HD in Raid1 for Mailboxes > 1 HD Spool > 1 HD for VM > > You all have a good weekend and a merry christmas next week > > Serge Dergham > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hardware Upgrade
Hello, Serge. I'm happy to chime in here, but let me start off with saying that you will get divergent opinions here, and that nobody will be absolutely right, as our answers are coloured by own experiences, and each implementation is unique. I'll also start off with asking you for your current and your intended message volumes, general architecture and software mix. Answering these details will help you keep the arguments comparing apples to apples because what is true for one respondent with low volume will not be true for another respondent with crushingly high volumes! My answers: 1- Memory I used to agonize over the making the exact right decision regarding slots, interleaving and multipliers; my truth *now* is that these are tweaks that make 2% to 6% of the raw memory speed in benchmarks and that it makes precious little difference in the real world for, say, an email server. Memory is relatively cheap; buy as much as you want as long it's from a name brand like Kingston, avoiding for example buying it from HP (the days are long gone where Compaq would tell you to remove 3rd party RAM to get support from them). 2- Disk technology Yes, my truth is that your fast servers need SCSI, SAS or a SAN based on those technologies. For bulk storage, choose SATA to save you a lot of money on back-end servers. In addition, buy a battery backed RAM cache controller for your RAID controller; this will enable write-cacheing on the RAID controller. An HP RAID controller will not assume that you have a battery backed UPS, and will not cache writes without this add-on. The throughput of your write operations are critical for a busy email server. If you buy an HP Proliant server based on SAS with 6 internal drives you will also need a second controller cable. 3- Disk layout Don't go cheap and use a single unprotected drive for any purpose. I used to like that format too, but my uptime and remediation time is more important than the cost of the drive technology. The layout you've described, it's good. Put the swap file on the System drive. Other commentary: If you use HP, you really really really should use their Firmware Update and SmartStart install CDs. Download the current version rather than using the one that comes in the box. Also update your HP Insight Manager once the OS is installed, and set up your HP Insight Manager to send email alerts to a generic helpdesk account within your tech support team and *never* to just one staff member. The cefib.com domain is an ISP; I'd actually recommend TWO servers that are less expensive instead of one large one for your environment. The first server: As an antispam gateway for your inbound mail. The second server: As your mailbox store and for your outbound mail. Put monitoring software on each, watching the other server and your other connectivity as required. Andrew. > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Serge > Sent: Friday, December 21, 2007 1:41 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] Hardware Upgrade > > Hi > > We are planning a hardware upgrade for february, after 5 > years on the previous ML370G2 > > We will buy a 2slot QuadXeon Motherboard, 1.333FSB, and > 2x2.33GHz QuadXeon, 2GB DDR2 and have some technichal > questions for the resident techies > > 1- Should we get the fastest memory available, or should the > memory speed be a divider of 1333 or 2.33 ? > > 2- Does a mail server really need SCSI or SAS @15K/Minute ? > or regular SATA @ 7K or 10K enough ? > > 3- We are planning on using : > > 2 HD in Raid1 for System > 2 HD in Raid1 for Mailboxes > 2 HD in Raid1 for Spool > > Where should we put the virtual Memory ? > > Or, is it better to have > > 2 HD in Raid1 for System > 2 HD in Raid1 for Mailboxes > 1 HD Spool > 1 HD for VM > > You all have a good weekend and a merry christmas next week > > Serge Dergham > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] automated response
Ik ben tot 7 januari afwezig. mvg. Erminio --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hardware Upgrade
Hi We are planning a hardware upgrade for february, after 5 years on the previous ML370G2 We will buy a 2slot QuadXeon Motherboard, 1.333FSB, and 2x2.33GHz QuadXeon, 2GB DDR2 and have some technichal questions for the resident techies 1- Should we get the fastest memory available, or should the memory speed be a divider of 1333 or 2.33 ? 2- Does a mail server realy need SCSI or SAS @15K/Minute ? or regular SATA @ 7K or 10K enough ? 3- We are planning on using : 2 HD in Raid1 for System 2 HD in Raid1 for Mailboxes 2 HD in Raid1 for Spool Where should we put the virtual Memory ? Or, is it better to have 2 HD in Raid1 for System 2 HD in Raid1 for Mailboxes 1 HD Spool 1 HD for VM You all have a good weekend and a merry christmas next week Serge Dergham --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
