How to find a slowdown?

Jeremy Huber JHuber at MICROSOURCE.COM
Thu Oct 7 15:32:58 IST 2004


Actually, that's exactly what I did (the MTA suggestion).  I realized
that the sa-blacklist also had a version for the sendmail access file,
so I tried that one, and that's MUCH better on the CPU.

Thanks for all the help!

-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
Behalf Of Julian Field
Sent: Thursday, October 07, 2004 1:33 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: How to find a slowdown?


You can blacklist at your MTA and stop these addresses' mail coming in
at all.
Or else use the per-domain/per-user white and blacklist code provided in
CustomConfig.pm in MailScanner. That's very fast.

At 20:27 06/10/2004, you wrote:
>1) The debug output didn't seem to indicate a certain spot where it's
>slow.. I can attach it if it'd help.
>2) Turning the RBL lookups didn't speed it up much at all (just did
>skip_rbl_lookups 1 in spam.assassin.prefs.conf)
>3) I next pulled out all the extra rules_du_jour scripts out
>(70_sare_adult.cf, 70_sare_random.cf, 99_sare_fraud_post25x.cf,
>antidrug.cf, blacklist.cf, bogus-virus-warnings.cf, evilnumbers.cf,
>local.cf, random.cf, tripwire.cf) of the /etc/mail/spamassassin
>directory, and now the spam checks are up around 4500 bytes per second,
>and screaming through the queue.
>4) Turned back on RBL, and added all the .cf files EXCEPT the blacklist
>in, and tried again, still screaming through them.
>5) Added in the blacklist - slower than snot.
>
>Ok, so the next question is: Is there a better way to do the
>blacklisting?  I'm doing the spam.bydomain extra stuff, too, or I'd
just
>add it into the MS blacklist..
>
>(Thanks!)
>Jeremy
>
>
>-----Original Message-----
>From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
>Behalf Of Jeff A. Earickson
>Sent: Wednesday, October 06, 2004 11:02 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: How to find a slowdown?
>
>
>Quick advice, run MailScanner in debug mode and see what happens.
>I'll bet that it gets slow on DNS lookups.  It always helps to run
>a caching DNS (stealth secondary) on your mail server.
>
>Jeff Earickson
>Colby College
>
>On Wed, 6 Oct 2004, Jeremy Huber wrote:
>
> > Date: Wed, 6 Oct 2004 10:32:54 -0600
> > From: Jeremy Huber <JHuber at MICROSOURCE.COM>
> > Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: How to find a slowdown?
> >
> > I've got a case where our brand new server that I put MailScanner on
>is
> > just CRAWLING.  Dual 2.4Ghz Xeon with 4GB RAM running Fedora Core 2,
>MS
> > 4.33.3, and SA 2.63 (I've turned off the virus scanning
temporarily).
> > We only push somewhere around 50k messages a day through it, so I'm
>not
> > sure why it's so slow.  It almost always has hundreds of messages in
>the
> > inbound queue.  I tried turning on LOG_SPEED, and the spam scanning
> > speed is usually around 600 bytes per second.  That seems insanely
>slow,
> > but I didn't what's "good."  I've got SA using DCC and Pyzor as well
>as
> > maybe 6 of the rulesets out of the rdj (one of which being the
> > blacklist).  Am I just making SA do too much, and that's why it's so
> > slow?
> >
> > Thanks for any help you guys can give!
> >
> > Jeremy

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
Buy the MailScanner book at www.MailScanner.info/store

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).



More information about the MailScanner mailing list