Need Recommendations

[Derek Catanzaro]

    [ The following text is in the "windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I haven't made any modifications to the standard rulesets that come with 
spamassassin and mailscanner, so I'm just using the defaults. I did 
however make the following $LANG change and it seems to have cleared up 
some of my delay issues (found this on Spamassassin's web site, when I 
did and "echo $LANG" it displayed utf8)
Are you using the default $LANG setting? Do this:
echo $LANG
If it contains "utf8", then that's probably the problem. Change it so it 
does not contain "utf8" (see RedHatMalformedUtf8 
<http://wiki.apache.org/spamassassin/RedHatMalformedUtf8>), and the 
performance issues will clear up.
Run the following to fix: ^ÓLANG=en_US; export LANG^Ô

I have upgraded my outdated MX server running on FC1 to the following:
mailscanner-4.41.3-1
spamassassin 3.0.3

I was getting slammed with SPAM this week and the upgrade has helped. I 
continue to get quite a few SPAM messages regarding stock quotes that 
are driving my users crazy so I need to figure out how to stop these 
emails. Thanks for everyone's suggestions and if you may have any 
insight on the SPAM I continue to receive I have included the header 
info on one of them.

HEADER FROM ONE OF THE STOCK SPAM MSGS

Date: Tue, 05 Apr 2005 15:54:49 +0500
From: "Jessie Stern" <gkxfbl at creativecircus.net>
Subject: US h0t st0ck highlights
X-Originating-IP: [209.55.66.4]
To: <rlett at packagingcorp.com>
Message-ID: <739919397864.GWY65620 at retrograde.friendsfabricart.com>
MIME-version: 1.0
X-Mailer: Internet Mail Service (5.5.8176.93)
X-VirusChecked: Checked
X-Env-Sender: gantry at catholicfamilycu.com
X-StarScan-Version: 5.2.94; banners=S_FROM_DOMAIN,-,-
Original-recipient: rfc822;rlett at packagingcorp.com
X-pca-MailScanner-Information: Please contact the ISP for more information
X-pca-MailScanner: Found to be clean
X-pca-MailScanner-SpamCheck: not spam, SpamAssassin (score=3.267, 
required 4,
BAYES_00 -2.60, FORGED_MUA_IMS 2.37, HELO_DYNAMIC_IPADDR2 3.50)
X-pca-MailScanner-SpamScore: sss
X-MailScanner-From: gkxfbl at creativecircus.net
X-MIMETrack: Itemize by SMTP Server on PCALAKLH01/PackagingCorp(Release 
6.5.1|January 21, 2004) at
05/06/2005 04:04:27 AM,
Serialize by Notes Client on Derek Catanzaro/LAK/PackagingCorp(Release
6.5.1|January 21, 2004) at 05/06/2005 11:21:02 AM,
Serialize complete at 05/06/2005 11:21:02 AM
Content-type: text/plain

Martin Hepworth wrote:

> Derek
>
> any difference in the rules you are running on the FC1 system to the FC2
> system? Any extras in /etc/mail/spamassassin and any RBL's etc.
> -- 
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Derek Catanzaro wrote:
>
>> 2 MX servers with the following
>>
>> Dual 933Mhz 1 Gig of memory
>> FC1 (mailscanner and spamassassin need to be upgraded)
>> mailscanner-4.31.6-1
>> spamassassin-2.63
>>
>> 1.7Mhz 512 Memory (desktop)
>> FC2
>> mailscanner-4.40.11-1
>> spamassassin-3.0.2-1
>>
>> I am experiencing a slow down in the delivery/processing of email on my
>> MailScanner servers. I receive roughly 50,000 emails on a daily basis
>> and if there is a delay in the processing of any emails it can get
>> backed up very quickly. I'm not sure if it is a DNS timing issue?,
>> would anyone recommend using local DNS in this case, or does anyone use
>> it and have they seen improvements? Can anyone recommend anything in
>> the MailScanner.conf file that may help?
>>
>> I have "Max children" set to 10 on the server with dual process and 5 on
>> the server with one processor, and "queue scan interval" is set to 6 on
>> both servers as well. I am using Clamav as my virus scanner. Please
>> let me know if you need additional info, and thanks in advance for your
>> assistance.
>>
>> Derek
>>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!