Re: Spam Decrease?

[Dean Baldwin]

Not really. We are still getting around 140,000+ messages a day that are 
spam :-(


Matthew Yette wrote:


Has anyone who runs a mail gateway service noticed a sharp drop in emails
since yesterday? I'm seeing about a 75% drop in total mail volume, and the %
of spam is much less...perhaps some ISPs cracked down recently?

Matt
 

Re: NFS and SA/Bayes DB

[Dean Baldwin]

Brutal and bloody solution is certainly something I don't want to do :-)

Thanks to all who responsed on this. Having read through them and 
thought about this a little more I am going to use an SQL database.


We currently take in around 0.5 million messages a day. I have a feeling 
that sharing a file based db is just asking for trouble!


Thanks,
Dean


Gary W. Smith wrote:



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Tuesday, September 20, 2005 9:39 AM
To: Dean Baldwin
Cc: users@spamassassin.apache.org
Subject: Re: NFS and SA/Bayes DB

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Dean Baldwin writes:


Hi,

I currently have a cluster of inbound MXs running Amavis/SA etc. At


the


moment they are running as single entities in the sense that they do


not


share their databases.

Has anybody tried this or any other method of shared db for multiple


MXs?



Yes, we did.  It was brutal and bloody but it worked.  Basically we had
a master that we rsync'ed across the network to all of the endpoints on
a scheduled basis (4 times a day).  Then we had a job on each machine to
swap those bayes DB's and restart SA.  Did I mention it was bloody?




It sounds like an SQL db is the best option.  NFS sharing is certainly


not


recommended.

With any luck one of the other large scale users using shared SQL dbs
might pipe up with comments here ;)




We have 4 MX servers for incoming mail that call back to two SA servers.
These SA servers use MySQL as the backend for both bayes and AWL.  Seems
to work just fine and actually seems to be a little faster for us as
well.  We don't use Amavis but instead use a commercial AV scanner that
runs on it's own servers as well.

Our backend MySQL is running Linux-HA with DRBD on a pair of Dell 4700's
with 1gb ram.

The SA servers are running on two Dell 4700's (with HT enabled) with 2gb
ram.  


The front end MX servers are running on a mixed set of dell
workstations.

We have been playing with this environment for some time swapping
hardware in and out but for the most part the environment has a very low
load balance.  


Typical email is about 170k emails per day.

HTH...

Gary Smith

NFS and SA/Bayes DB

[Dean Baldwin]

Hi,

I currently have a cluster of inbound MXs running Amavis/SA etc. At the 
moment they are running as single entities in the sense that they do not 
share their databases.


This clearly has started to cause a couple of problems in that they will 
all see different volumes of different messages. As such they will be 
learning different things as different speeds.


I have been looking at different ways of implementing some kind of 
central database. One of which is to use Mailguard and drop everything 
into a MySQL db.


At the moment the quickest and easiest way of doing this for us is to 
use an NFS file system they can each see and configure SA/Amavis to use 
this mount for their dbs.


Has anybody tried this or any other method of shared db for multiple MXs?

Any thoughts, ideas or comments would be greatly appreciated.

Many thanks,
Dean

Adding information messages to SPAM

[Dean Baldwin]

Hi,

I am currently running Spamassassin with Postfix and Clamav. Everything 
is working well but I would like to see whether the following is 
possible and how to go about it.


At the moment we send all SPAM messages onto the recipient with the 
subject line flagged as SPAM and this works well. However, we have had a 
couple of false positives that I would like to be made aware of.


Is there anyway of placing a message - say at the top of the mail - 
stating that if this message has been incorrectly flagged as SPAM then 
please let us know. Is there any way of doing this with Spamassassin? I 
only want to flag those reported as SPAM though.


Many thanks,
Dean