> > I need some help here.. > > Last Mon, Tues & Wed I had severe inflow of spam, always at 12.30p EST, > Wed > it didn't stop till almost 5p. The server seems to not be very cooperative > when the queue grows over 200 or so. > > I have max child set to 15 (up from 5) and not sure what else I can offer > in > the way of what you need to know to help me, but if you tell me where to > look I can spout what you need. > > The install is out of the box with few if any mods except exim does have > the > dictionary attack, I run BFD and APF > > I do not believe I have been hacked into.. I DO read the logwatch daily > and > do poke around looking for dropped files on a semi regular basis.. > > this high amount of spam, (BTW scoring at 20-well over 1000) is killing > the > loads and I have screaming clients.. > > Just this afternoon (again around 12.30) it loaded up again with 312 > mails.. > the web based control panel was reacting so slow I would get 3 new ones > for > every one I managed to delete or deliver (I could not just delete the > queue > because some were actually valid mails in there) Server loads rose to well > over 30, I shut exim - but cpanel was so kind to automagically restart it > every time.. tried a reboot from ssh but that just hung.. the tech peeps > did > it from their end it it worked and brought the loads down so I could > delete > faster than they came in and now we're back to normal loads and queue > > I did upgrade to SA 3.1.7 last week - Wed night after a long day of > battling > the loads.. and that seemed to go well > > suggestions? Offers of help??? > > thanks
Debbie, Is the mail legitimate email? Meaning does the email come from wherever to *valid email addresses* on the server or do you have a system that will catch everything at the smtp level and then sort it out later? If your server catches everything, the smtp gate should probably be fortified with greylisting and invalid email address rejection first. There is not enough other info for me to recommend further... Thanks and kind regards, - rh -- Robert - Abba Communications Computer & Internet Services (509) 624-7159 - www.abbacomm.net
