At 01:39 PM 2/1/2005, Alan Shine wrote:
when I'm running SA with the default ruleset (the one that comes with the installation), it proccesses 16 messages per second. I don't know if it is the avarage amount of messages that SA can proccess. anyway - 16 per second is not good enough for me - because the spam catch rate is very low - I must add more rules to it.
Ok, fair enough, it's definitely the SARE rules that are causing your problem.
How about trying adding SOME of SARE, instead of all of it at once. Remember, the SARE rules are only developer tested. I'd not be surprised if there's some that cause problems for high-load systems.
Add the SARE rulesets one at a time and see how it goes.
