David B Funk wrote:

> On Fri, 21 May 2010, Jean-Paul Natola wrote:
> 
>> These are the stats for the week
>> Total number of emails processed by the spam filter : 58249
>> Number of spams                         :     54479 ( 93.53%)
>> Number of clean messages                :      3770 (  6.47%)
>> Average message analysis time           :     10.98 seconds
>> Average spam analysis time              :      6.76 seconds
>> Average clean message analysis time     :     23.35 seconds
>> Average message score                   :     11.49
>> Average spam score                      :     20.10
>> Average clean message score             :    -13.76
>> Total spam volume                       :       677 Mbytes
>> Total clean volume                      :       579 Mbytes
> 
> That box is rather elderly and under-powered by modern standards.
> New improved versions of SA and other apps are only going to get
> -more- resource hungry. 

Whilst that is true, todays SA (3.2.5) does very well handling about
6000msgs/day on my test system consisting of 4 x PII 400MHz with about
400MB RAM each.  Each system runs max 5 spamd children, 3 for regular
mail, 2 for honeypotted. 

> Let's run the numbers;
>  1 week = 604800 seconds, 604800/58249 messages in a week
> = 10.38 seconds per message.
> Your average analysis time is 10.98 seconds.
> 
> Thus you could almost run your system in single threaded mode
> and be OK. two threads should be plenty, if the incoming arrivals
> were evenly distributed. Should be no need for 40 children
> ever, unless you're getting hit with a spam flood.

The MTA queue will deal with a flood far better than spamd - my test
system boxes regularly have queues of up to 300 emails, occasionally
more, but they're mostly honeypotted and rarely last very long.

> So you are either going to need to upgrade it or protect it by
> reducing the number of concurrent messages being processed.

+1


/Per Jessen, Zürich

Reply via email to