> you're tied in with this plan. what would you recommend? I'm seeing > messages take 30 to 45 seconds to process. that's way too long. should I > 1) use -L
I wouldn't recommend it, but you can run without net tests. You have to spend more time on making sure you have good rules though. > 2) turn some rules off so that I'm checking fewer RBL's? (I've had good > luck with spamhaus.) Maybe, but I wouldn't expect that the number of net tests per se should be affecting parsing speed. The net tests run in parallel with the other tests, and then there is a final timeout if the tests haven't arrived by then. > 3) get a faster computer Don't know how fast your machine is, but if the load average is reasonable I don't immediately see that faster would help. If you are swamped, then some new hardware would sure help. But more often than not for SA this would be more memory rather than a faster processor. 4) Maybe a local dns cache > I only have 500 mailboxes so I can't be processing anything like the 100k of > messages a day that your faq says would require local dns. Keeping network tests is a real good idea. Currently SURBL seems to be one of the best ones to keep, but others can help too. I would try to figure out why your net tests are so slow. Or maybe first figure out (if you haven't already) whether it is really the net tests that are slowing you down. Maybe you are thrashing, and more memory, or running fewer spamd children, or having them expire after fewer connections would be the real cure here. Loren