How to find a slowdown?

[Martin Hepworth]

<x-flowed>
Jeremy

are you talking about William Stearn's sa-blacklist file????

If so it's *huge* (go on, do a ls -l I dare you), and hence the large
amount of time it takes to parse email when you use this file.

Anyway you can replace this with a surbl.org URI rbl. Install the
spamcop URI plugin and you'll get the ws.surbl.org as a replacement URI
rbl for the blacklist.cf.

There are also other useful URI RBL's that surbl.org host as well...


--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Julian Field wrote:
> You can blacklist at your MTA and stop these addresses' mail coming in
> at all.
> Or else use the per-domain/per-user white and blacklist code provided in
> CustomConfig.pm in MailScanner. That's very fast.
>
> At 20:27 06/10/2004, you wrote:
>
>> 1) The debug output didn't seem to indicate a certain spot where it's
>> slow.. I can attach it if it'd help.
>> 2) Turning the RBL lookups didn't speed it up much at all (just did
>> skip_rbl_lookups 1 in spam.assassin.prefs.conf)
>> 3) I next pulled out all the extra rules_du_jour scripts out
>> (70_sare_adult.cf, 70_sare_random.cf, 99_sare_fraud_post25x.cf,
>> antidrug.cf, blacklist.cf, bogus-virus-warnings.cf, evilnumbers.cf,
>> local.cf, random.cf, tripwire.cf) of the /etc/mail/spamassassin
>> directory, and now the spam checks are up around 4500 bytes per second,
>> and screaming through the queue.
>> 4) Turned back on RBL, and added all the .cf files EXCEPT the blacklist
>> in, and tried again, still screaming through them.
>> 5) Added in the blacklist - slower than snot.
>>
>> Ok, so the next question is: Is there a better way to do the
>> blacklisting?  I'm doing the spam.bydomain extra stuff, too, or I'd just
>> add it into the MS blacklist..
>>
>> (Thanks!)
>> Jeremy
>>
>>
>> -----Original Message-----
>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>> Behalf Of Jeff A. Earickson
>> Sent: Wednesday, October 06, 2004 11:02 AM
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Re: How to find a slowdown?
>>
>>
>> Quick advice, run MailScanner in debug mode and see what happens.
>> I'll bet that it gets slow on DNS lookups.  It always helps to run
>> a caching DNS (stealth secondary) on your mail server.
>>
>> Jeff Earickson
>> Colby College
>>
>> On Wed, 6 Oct 2004, Jeremy Huber wrote:
>>
>> > Date: Wed, 6 Oct 2004 10:32:54 -0600
>> > From: Jeremy Huber <JHuber at MICROSOURCE.COM>
>> > Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
>> > To: MAILSCANNER at JISCMAIL.AC.UK
>> > Subject: How to find a slowdown?
>> >
>> > I've got a case where our brand new server that I put MailScanner on
>> is
>> > just CRAWLING.  Dual 2.4Ghz Xeon with 4GB RAM running Fedora Core 2,
>> MS
>> > 4.33.3, and SA 2.63 (I've turned off the virus scanning temporarily).
>> > We only push somewhere around 50k messages a day through it, so I'm
>> not
>> > sure why it's so slow.  It almost always has hundreds of messages in
>> the
>> > inbound queue.  I tried turning on LOG_SPEED, and the spam scanning
>> > speed is usually around 600 bytes per second.  That seems insanely
>> slow,
>> > but I didn't what's "good."  I've got SA using DCC and Pyzor as well
>> as
>> > maybe 6 of the rulesets out of the rdj (one of which being the
>> > blacklist).  Am I just making SA do too much, and that's why it's so
>> > slow?
>> >
>> > Thanks for any help you guys can give!
>> >
>> > Jeremy
>
>
> --
> Julian Field
> www.MailScanner.info
> MailScanner thanks transtec Computers for their support
> Buy the MailScanner book at www.MailScanner.info/store
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>