I have been following this thread and have the same issue from time to time.
I trimed down my skippy filter files to almost nothing, (They work about that good now.) This helped with the CPU usage. Seems filter files (even small ones) take up lots of CPU time. So I setup another mail server a few months ago to do what Scott suggested. I had to off line it. Instead of helping it was like adding another fishing net to dip spam out of the internet. Seemed like all it did was give the spammers another port 25 to attack. Now we had twice as much email that was junk. It wasn't Imgate It was Imail and Declude. Robert ----- Original Message ----- From: R. Scott Perry <[EMAIL PROTECTED]> To: <[email protected]> Sent: Saturday, July 30, 2005 7:53 PM Subject: Re: [Declude.JunkMail] Declude Woes > > I see about 250,000 messages per day and I have 3000 accounts. > > > 3.05ghz xeon with 1gb of RAM > > > I thought it would be worth making a few comments here. The two most > likely culprits are either CPU usage or processing time per message. > > Typically, when using anti-virus, it is recommended to have at least > 1GHz of CPU power for every 100,000 E-mails/day that a server handles. > So in this case, you have just a bit more than the minimum recommended > amount of CPU. The first thing to do is check your CPU usage when you > have Declude running; if it is at 100%, you've found the main issue. If > that is the case, following the suggestion of switching to F-Prot would > be a good option, and checking to see if you are using CPU-intensive > Declude JunkMail filters would be a good idea. > > The second is that at 250,000 E-mails/day, you are close (in the same > order of magnitude, at least) to the maximum amount of E-mail that an > IMail server can comfortably handle. At that volume, each E-mail > normally has about 10 seconds to be scanned and delivered. Exceed that, > and E-mail will get backed up until the rate goes back under that ~10 > second threshold. If you never go below that threshold, you will never > be able to deliver all your E-mail (it's kind of like eating more > calories than you burn every day -- you'll keep gaining weight forever > until you burn more calories or eat less calories). > > If the issue is processing time, one option is to either add another > IMail server to help balance the load, or have one or more gateways > (IMail, IMGate, or something else) process the E-mail first. Another > option is to reduce the amount of time spent processing each E-mail -- > unless there is a configuration issue, Declude Virus should take <1 > second to scan each E-mail, so tuning the Declude JunkMail settings > would be good here (weeding out any spam databases or other lookups that > are no longer responding, or slow to respond). > -Scott > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
