On Thu May 20 2004 03:59 am, root linux wrote: although the time in process says no, it could very well be. we explored many packages both free and commercial trial versions until we found one fast enough to fit our needs. most were intolerably slow. by that i mean they took only a few seconds to process but that was too slow. we were looking for something to average under a second on all but the largest attachments.
one way to do this would be to , for a few seconds anyway, disable the virus scanner in qmail-scanner-queue.pl and watch if it returns your processing times to normal. i have also seen definition files cause severe slowdowns in a/v scanners, and soon as they were replaced, the problem went away. > Could it be the antivirus processing problem? I am > using Virus Scan for Linux v4.24.0 > > Regards, > rootlinux > > --- Chuck <[EMAIL PROTECTED]> wrote: > > On Wed May 19 2004 12:46 pm, root linux wrote: > > hmm.. if it is any consolation, and i dont know if > > anyone else experienced > > this, but our incoming attempted mail volume > > increased at least 100% or more > > this past week. it is starting to level back off a > > bit now though. to be > > honest. i personally think that is not enough ram to > > properly run a fully set > > up qmail system that is used by the public. from my > > personal experience with > > it, i would not attempt to run a public server in > > less than 640mb ram. > > private server could probably get away with it at > > 256. hmm maybe a definition > > of what i mean is wise.. to me a public server means > > run at an isp or > > similar handling a few thousand 'home' domains. > > private would mean 1 or 2 > > domains in an office or home environment. > > > > the machine has enough processor power. more than > > enough. if you watch the > > processor usage you will see it hardly rises due to > > its speed in handling > > what little it has to. > > > > > > what may be interesting too is to watch your smtp > > log and see how many smtp > > threads are running average and what your total > > allowed is. if they are > > always building up to the max, your rbl may be > > taking too long. we sometimes > > see that.. we run rblsmtpd with spamcop, spamhaus > > and ordb. sometimes when > > they start gumming up the works, one of them may be > > timing out etc, we just > > eliminate that one for a day or so. > > > > > This is an Intel P3 1GHz with 256MB of RAM > > > > > > But it performed ok since this week...bad things > > > happened, :( > > > > > > Regards, > > > rootlinux > > > > > > --- Chuck <[EMAIL PROTECTED]> wrote: > > > > On Wed May 19 2004 11:54 am, root linux wrote: > > > > hmm. odd. i am going to top-answer this one due > > > > to > > > > > > its length. tail the queue > > > > log and see if you can manually notice the > > > > delay. > > > > > > according to the av scanner > > > > it only took .5 secs to complete its scan yet > > > > the > > > > > > entire thing took 11 > > > > seconds? very odd. the most i have ever seen our > > > > system take was about 2 > > > > seconds when it had to unzip an 18mb file > > > > attachment > > > > > > and scan the contents. > > > > the internal known virus comparisons and > > > > unwanted > > > > > > extension comparisons are > > > > so fast they cannot be a contributing factor. > > > > > > > > by any chance is this a slower machine? that can > > > > have some effect on it (ours > > > > is only 700-mhz but it is more than sufficient). > > > > also how much ram do you > > > > have installed? if you can please paste a > > > > complete > > > > > > free report about this. > > > > running out of ram can also cause this behavior > > > > (ours is 1gb.. we topped ram > > > > quite a bit when we had 512mb). does anything > > > > else > > > > > > live on this machine or is > > > > it dedicated to qmail? > > > > > > > > > > > > Chuck > > > > > > > > > Here is the mail message header: - > > > > > > > > > > Return-Path: <[EMAIL PROTECTED]> > > > > > Delivered-To: [EMAIL PROTECTED] > > > > > Received: (qmail 15388 invoked by uid 504); 19 > > > > May > > > > > > > 2004 15:34:13 -0000 > > > > > Received: from [EMAIL PROTECTED] by > > > > > > > > mail.example.com > > > > > > > > > by uid 501 with qmail-scanner-1.16 (ehost > > > > Clear:. > > > > > > > Processed in 11.096361 secs); 19 May 2004 > > > > 15:34:13 > > > > > > > -0000 > > > > > Received: from unknown (HELO mail.yahoo.com) > > > > > > > > (1.1.1.1) > > > > > > > > > by 0 with SMTP; 19 May 2004 15:34:02 -0000 > > > > > Received: from mail.yahoo.com (intermail > > > > > > > > [127.0.0.1]) > > > > > > > > > by mail.yahoo.com (8.12.8/8.12.8) with ESMTP > > > > id > > > > > > > i4JFUssu019078 for <[EMAIL PROTECTED]>; > > > > Wed, > > > > > > 19 > > > > > > > > > May 2004 23:30:54 +0800 > > > > > From: "rootlinux" <[EMAIL PROTECTED]> > > > > > To: [EMAIL PROTECTED] Subject: test - > > > > 11:41pm > > > > > > > Date: Wed, 19 May 2004 23:30:54 +0800 > > > > > Message-Id: > > > > <[EMAIL PROTECTED]> > > > > > > > Mime-Version: 1.0 Content-Type: > > > > > > > > > > > > > > > Here is the qmail-queue.log: - > > > > > > > > > > 19/05/2004 23:34:02:15383: +++ starting > > > > debugging > > > > > > for > > > > > > > > > process 15383 by uid=501 at 19/05/2004 > > > > 23:34:02 > > > > > > > 19/05/2004 23:34:02:15383: setting UID to EUID > > > > so > > > > > > > subprocesses can access files generated by > > > > this > > > > > > script > > > > > > > > > 19/05/2004 23:34:02:15383: program name is > > > > > qmail-scanner-queue.pl, version 1.16 > > > > > 19/05/2004 23:34:02:15383: incoming SMTP > > > > > > > > connection > > > > > > > > > from via smtp from 1.1.1.1 > > > > > 19/05/2004 23:34:02:15383: w_c: mkdir > > /var/spool/qmailscan/mail.example.com108498084243115383 > > > > > > 19/05/2004 23:34:02:15383: w_c: start dumping > > > > > > > > incoming > > > > > > > > > msg into > > /var/spool/qmailscan/working/tmp/mail.example.com108498084243115383 > > > > > > [1084980842.13506] > > > > > 19/05/2004 23:34:02:15383: w_c: rename new msg > > > > > > > > from > > /var/spool/qmailscan/working/tmp/mail.example.com108498084243115383 > > > > > > to > > /var/spool/qmailscan/working/new/mail.example.com108498084243115383 > > > > > > [1084980852.63514] > > > > > 19/05/2004 23:34:02:15383: d_m: starting > > > > > /usr/local/bin/reformime > > -x/var/spool/qmailscan/mail.example.com108498084243115383/ > > > > > </var/spool/qmailscan/working/new/mail.example.com108498084243115383 > > > > > > [1084980852.63558] > > > > > 19/05/2004 23:34:02:15383: d_m: finished > > > > > /usr/local/bin/reformime > > -x/var/spool/qmailscan/mail.example.com108498084243115383/ > > > > > > [1084980852.69235] > > > > > 19/05/2004 23:34:02:15383: d_m: Manually > > > > unpack > > > > > > any > > === message truncated === > > > > > > __________________________________ > Do you Yahoo!? > Yahoo! Domains Claim yours for only $14.70/year > http://smallbusiness.promotions.yahoo.com/offer > > > ------------------------------------------------------- > This SF.Net email is sponsored by: Oracle 10g > Get certified on the hottest thing ever to hit the market... Oracle 10g. > Take an Oracle 10g class now, and we'll give you the exam FREE. > http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click > _______________________________________________ > Qmail-scanner-general mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general -- Chuck "...and the hordes of M$*ft users descended upon me in their anger, and asked 'Why do you not get the viruses or the BlueScreensOfDeath or insecure system troubles and slowness or pay through the nose for an OS as *we* do?!!', and I answered...'I use Linux'. " The Book of John, chapter 1, page 1, and end of book ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id149&alloc_id66&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
