"Martin Schweizer" <[EMAIL PROTECTED]> wrote: > On my mail server, I run FreeBSD 7.0 with sendmail/spamass-milter. > Since some times I see some high usage of the processes > "spamass-milter". Since then it seems that I have now I bad response > time. But I have no idea from when... I solutions could be to you two > servers: one with spamassins and the other with sendmail. > Do you can give me any hints? > > Regards > > # top > last pid: 59299; load averages: 7.94, 8.33, 8.33 > 140 processes: 9 running, 131 sleeping > CPU states: 18.4% user, 0.0% nice, 81.6% system, 0.0% interrupt, 0.0% idle > Mem: 279M Active, 21M Inact, 171M Wired, 15M Cache, 111M Buf, 511M Free > Swap: 2023M Total, 2008K Used, 2021M Free > > PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND > 94761 root 1 128 0 12964K 3060K RUN 33.8H 11.82% spamass-milter > 585 root 1 128 0 12964K 3056K RUN 33.0H 11.82% spamass-milter > 99155 root 1 128 0 12964K 3060K RUN 33.2H 11.72% spamass-milter > 89596 root 1 128 0 11112K 2792K RUN 36.4H 11.67% spamass-milter > 93129 root 1 128 0 11116K 2796K RUN 34.6H 11.57% spamass-milter > 89464 root 1 128 0 11112K 2792K RUN 36.5H 11.52% spamass-milter > 89010 root 1 128 0 11104K 2784K RUN 36.9H 11.47% spamass-milter > 660 root 1 128 0 37032K 34636K RUN 191.8H 11.18% python2.4 > [snip]
0) How many message do you expect your MTA to handle in "peak hour"? [ Most fine tuning advises for sendmail depend on it ] 1) Which set of DNSBL do you use? Good set of DNSBL checks should "cut off" almost 70% of spam before milter has a chance to consult spamassassin. Try to reject most of spam at cost lower than incurred by spamassassin. http://www.sendmail.org/m4/features.html#enhdnsbl [ consider using zen.spamhaus.org and dnsbl.sorbs.net ] It is possible to make sendmail fine tune set of DNSBL used based on "country of origin" e.g. lax rules for "near by countries" and picky mode for CN, KR, TW. [requires generating sendmail.cf also from non sendmail.org m4 files] [more hints upon request] 2) Have you considered using MIMEDefang.org milter? 2a) It can do more checks than merely consulting spamassassin e.g. anti-MS-virus checks and SPF records checks 2b) It does not run as super user -- [pl>en: Andrew] Andrzej Adam Filip : [EMAIL PROTECTED] : [EMAIL PROTECTED] Maybe ain't ain't so correct, but I notice that lots of folks who ain't using ain't ain't eatin' well. -- Will Rogers
