We're a fairly small ISP and our mail server receives around 100-150
thousand messages per day. We've started running q-s system-wide for
viruses and spam. The load the server is under is quite acceptable - most
of the time it's between 0.50 and 2.5, and I haven't seen it exceed 5.0
yet.
However, with one test account that receives 100% spam, I have the
following statistics:
It had 13 messages quarantined or deleted, received 17, 6 of which were
correctly marked with a Spam-Status header. Of course, this leaves 9
messages totally unfiltered, or about almost a third. After I scanned the
new mail directory, I found a message that scored a 27. It seems that
sometimes spamd is just too busy to bother accepting new mail to filter.
Here's the headers:
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 70387 invoked by uid 85); 12 Dec 2003 09:57:09 -0000
Received: from [EMAIL PROTECTED] by pop.lightspeed.ca by uid 82 with
qmail-scanner-1.20
(. spamassassin: 2.60. Clear:RC:1(206.12.82.140):.
Processed in 0.070997 secs); 12 Dec 2003 09:57:09 -0000
X-Lightspeed-Antivirus-Mail-From: [EMAIL PROTECTED] via pop.lightspeed.ca
X-Lightspeed-Antivirus: 1.20 (Clear:RC:1(206.12.82.140):. Processed in
0.070997 secs)
Received: from smtp.lightspeed.ca (206.12.82.140)
by pop.lightspeed.ca with SMTP; 12 Dec 2003 09:57:09 -0000
Received: from 206.12.82.140 ([204.180.76.202])
by smtp.lightspeed.ca (8.12.10/8.12.10) with SMTP id hBC9w0dB019584;
Fri, 12 Dec 2003 01:58:04 -0800 (PST)
Received: from [77.21.123.178] by 206.12.82.140; Fri, 12 Dec 2003 05:04:24
-0500
Message-ID: <[EMAIL PROTECTED]>
From: "Edwardo Shea" <[EMAIL PROTECTED]>
Reply-To: "Edwardo Shea" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: D.octor Rec.ommended plha eu f
Date: Fri, 12 Dec 2003 05:04:24 GMT
X-Mailer: The Bat! (v1.52f) Business
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="A..BB..9.__0AF76..C889A"
X-Priority: 3
X-MSMail-Priority: Normal
And for comparison, here's the headers for one of the messages that
trapped spamd properly:
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 5289 invoked by uid 85); 12 Dec 2003 16:31:17 -0000
Received: from [EMAIL PROTECTED] by pop.lightspeed.ca by uid 82 with
qmail-scanner-1.20
(. spamassassin: 2.60. Clear:RC:0(68.58.99.166):SA:0(2.6/6.0):.
Processed in 0.440182 secs); 12 Dec 2003 16:31:17 -0000
X-Spam-Status: No, hits=2.6 required=6.0
X-Lightspeed-Antivirus-Mail-From: [EMAIL PROTECTED] via pop.lightspeed.ca
X-Lightspeed-Antivirus: 1.20 (Clear:RC:0(68.58.99.166):SA:0(2.6/6.0):.
Processed in 0.440182 secs)
Received: from pcp958848pcs.bechgr01.in.comcast.net (68.58.99.166)
by pop.lightspeed.ca with SMTP; 12 Dec 2003 16:31:16 -0000
Received: from [243.9.94.217] by pcp958848pcs.bechgr01.in.comcast.net SMTP
id nmVINfXo2Q3dxa for <[EMAIL PROTECTED]
ghtspeed.bc.ca>; Fri, 12 Dec 2003 20:26:32 +0400
Message-ID: <[EMAIL PROTECTED]>
From: "Leland Green" <[EMAIL PROTECTED]>
Reply-To: "Leland Green" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: <[EMAIL PROTECTED]>
Subject: Boost Your Car's Gas Mileage 27%+.....denise
Date: Fri, 12 Dec 2003 20:26:32 +0400
X-Mailer: greattgimes
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="AB3F.AC.E_A4E.7."
X-Priority: 3
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
