Quoting Ira Abramov, from the post of Tue, 09 May: > My server is running a heavy website and recieves mail for some 30 users > under 8 domains or so. the amount of spam hitting the server is causing > the load average to drag at times from a calm 1 or 2 up to 12 and even > 20. this is actually hurting the websites' responsiveness a lot. I'm
Everything mail is under "nice", I limited qmail to 10 concurent incoming (plus it is checking 3 RBLs), I have a long list of badmailto and badmailfrom, I added a lot of domains to the SA's whitelist, and still I have spamassassin choking up. I removed many of the rules from SARE and even some of the base. the problems continue, for the sheer load on SA. my mail log rotated at 5am and since then (9 hours) SA has rejected 5800 spams. this is NUTS. it means barely 5% are legitimates and false negatives (I still have those). I managed to get the checking time of each mail item from 15-25 to 6-12 seconds, but it's still quite long. the problem is that legitimate mail can't compete with the zealous spammer cannons, and either gets in late or worse - 5-6 times since the remote relay gives up on getting the "250 OK" from the SMTP since the test time is still long (I reject mail at the SMTP with simscan). ideas to get the load lower? dspam any good? I think I asked that before, but everything I implemented is still not helping much. I'll feel really annoyed if I have to upgrade the expensive hardware because of spammers. how bad is the spam on YOUR servers? some stats from the last days: Monday 14,090 spams Sunday 14,210 Saturday 14,120 Friday 5,482 (Muslim spammers resting? Thursday 3,002 Wednesday 2,244 Tuesday 2,629 did everybody have the weekend bump, or is it something I should feel special about? -- The jewel of the Nile Ira Abramov http://ira.abramov.org/email/ ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
