[Fwd: Re: [Mailwatch-users] New to mailwatch--Few general questions]

Fri Apr 30 17:54:25 IST 2004

Jason

direct email to you bounced with a relay denied error...

   jwilliams at courtesymortgage.com
     SMTP error from remote mailer after RCPT
TO:<jwilliams at courtesymortgage.com>:
     host mx.aspadmin.com [209.126.228.31]: 550 5.7.1
<jwilliams at courtesymortgage.com>... Relaying denied

so here's my responses..

To everyone else - apologies for the noise..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

-------- Original Message --------
Subject: Re: [Mailwatch-users] New to mailwatch--Few general questions
Date: Fri, 30 Apr 2004 17:50:34 +0100
From: Martin Hepworth <martinh at solid-state-logic.com>
To: Jason Williams <jwilliams at courtesymortgage.com>
References: <5.2.1.1.0.20040429091728.02d31788 at pop.courtesymortgage.com>
<5.2.1.1.0.20040429091728.02d31788 at pop.courtesymortgage.com>
<5.2.1.1.0.20040430092304.00aba240 at pop.courtesymortgage.com>

Jason Williams wrote:
> Hi Martin,
>
> I appreciate your reply. I hope you dont mind me emailing you off list,
> but just wanted to ask a couple quick questions.
>
>
>> anyway I use MailWatch on FreeBSD (4.8).
>
>
> FreeBSD 4.9 here...so just a slight difference. :)
>

I'll get around to upgrading some when - just need a little time one
weekend when I do it.

>> I built the BerkleyDB, mysql, apache and php from packages and used
>> the packages version of perl (5.8) rather than the inbuilt. I
>> installed SA and clamav from source. and all the prerequisite perl
>> modules from CPAN or source.
>
>
> Hmm. Was wondering if I should upgrade my version of Perl on my system.
> Yet, never really built 5.8 on a FreeBSD box. Never needed to.
> I also built SA and ClamAV from source as well.
>

I used the port version of perl 5.8 so you can switch between to two
with a supplied script..

>
>> as for the mailwatch you'll need to hand configure a couple of the
>> conf files and a couple of the php files so they point at the right
>> directories, it assumes a linux rpm location for apaches htdocs for
>> example and doesn't look in the right place for the SA rules to update.
>
>
> I've been trying to find as much info as I can, reading up on docs,
> mailing lists etc. to see all what I need to do. Seems pretty straight
> forward for the most part, but there is only one hiccup for me; MySQL. I
> have a little bit of experience with MySQL, but not a whole lot (using
> mailwatch would allow me to get my hands dirty :) )....so im a bit
> confused on what exactly I need to install for MySQL...specific version?
> server? client? etc...any recommendations?
>

install the client from ports...it will do the server as a requisite.

>
>> also you'll need the old version of the DBD-mysql perl module as the
>> new is borken for some reason that Steve (Mr MailWatch) Freegard
>> hasn't yet figured out.
>
>
> Ya. Saw that in the INSTALL file. it shouldn't be too bad, but you never
> know. :)
>
>> have fun..
>>
>> you don't mention how much email traffic you get aday, but my 600mhz
>> celeron can handle about 15,000 emails a day (85% malware/spam) before
>> it starts to slow down..(running everything -mysql etc- locally). But
>> I';ve moved a fews things of local rules to URI stuff so that may have
>> increase by now..
>
>
> At this point, im setting this up and I really don't have a whole lot of
> data on much email to expect. I'm expecting about 60% of our email to be
> email sent within the company, which means it will never touch the mail
> gateway server. I'm curious and anxious and some anxiety is mixed in as
> well. Specs on machine (not sure if i posted)
>
> Dual 1ghz CPU's (rebuilt kernel to for SMP support)
> 2gig RAM
> (2) 16gig SCSI drives
> I also mounted /var/spool/MailScanner/incoming as  mount_mfs
>

I did testing on this and it made no difference on a softupdated system
- YMMV as I only got 512MB ram/IDE/600mhz celeron. In fact my
performance was slightly less prob due to lack of RAM.

>> on the mysql db dir and /var if you turn on softupdates it helps (see
>> man tunefs), as does running a local named so dns lookups cache if you
>> are using RBLS/URI lookups.
>
>
> Yep. have softupdates on. Good idea on the local named. Never thought
> about that.
>
>
>> There are also a couple of DB cleanup crontabs you might to install to
>> keep only the X days of data in the DB, and also cleanup the
>> quarantine dir every X days too..find these on the archive (if not on
>> the MailWatch tar ball) and the MS tar ball too I think.
>
>
> I appreciate the tip.
>
> Thanks Martni. I really do appreciate it.
>

no problems..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

-------------------------- MailScanner list ----------------------
To leave, send    leave mailscanner    to jiscmail at jiscmail.ac.uk
Before posting, please see the Most Asked Questions at
http://www.mailscanner.biz/maq/     and the archives at
http://www.jiscmail.ac.uk/lists/mailscanner.html