Need Recommendations

Fri May 6 17:33:00 IST 2005

    [ The following text is in the "windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Derek

ah ok, then make sure you

1) use the surbl.org URI-rbls, these are built into 3.x but need a patch 
for 2.6x (all available on the web site that tells you how to enable, 
patch etc). You still need to enable it in SA3.x but its easy todo.

2) drip feed extra rules from www.rulesemporium.com into 
/etc/mail/spamassassin and watch for improvements. rinse, repeat etc. 
I've got most of the rules in there on my system and they help immensely.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

Derek Catanzaro wrote:
> I haven't made any modifications to the standard rulesets that come with 
> spamassassin and mailscanner, so I'm just using the defaults. I did 
> however make the following $LANG change and it seems to have cleared up 
> some of my delay issues (found this on Spamassassin's web site, when I 
> did and "echo $LANG" it displayed utf8)
> Are you using the default $LANG setting? Do this:
> echo $LANG
> If it contains "utf8", then that's probably the problem. Change it so it 
> does not contain "utf8" (see RedHatMalformedUtf8 
> <http://wiki.apache.org/spamassassin/RedHatMalformedUtf8>), and the 
> performance issues will clear up.
> Run the following to fix: ^ÓLANG=en_US; export LANG^Ô
> 
> I have upgraded my outdated MX server running on FC1 to the following:
> mailscanner-4.41.3-1
> spamassassin 3.0.3
> 
> I was getting slammed with SPAM this week and the upgrade has helped. I 
> continue to get quite a few SPAM messages regarding stock quotes that 
> are driving my users crazy so I need to figure out how to stop these 
> emails. Thanks for everyone's suggestions and if you may have any 
> insight on the SPAM I continue to receive I have included the header 
> info on one of them.
> 
> HEADER FROM ONE OF THE STOCK SPAM MSGS
> 
> Date: Tue, 05 Apr 2005 15:54:49 +0500
> From: "Jessie Stern" <gkxfbl at creativecircus.net>
> Subject: US h0t st0ck highlights
> X-Originating-IP: [209.55.66.4]
> To: <rlett at packagingcorp.com>
> Message-ID: <739919397864.GWY65620 at retrograde.friendsfabricart.com>
> MIME-version: 1.0
> X-Mailer: Internet Mail Service (5.5.8176.93)
> X-VirusChecked: Checked
> X-Env-Sender: gantry at catholicfamilycu.com
> X-StarScan-Version: 5.2.94; banners=S_FROM_DOMAIN,-,-
> Original-recipient: rfc822;rlett at packagingcorp.com
> X-pca-MailScanner-Information: Please contact the ISP for more information
> X-pca-MailScanner: Found to be clean
> X-pca-MailScanner-SpamCheck: not spam, SpamAssassin (score=3.267, 
> required 4,
> BAYES_00 -2.60, FORGED_MUA_IMS 2.37, HELO_DYNAMIC_IPADDR2 3.50)
> X-pca-MailScanner-SpamScore: sss
> X-MailScanner-From: gkxfbl at creativecircus.net
> X-MIMETrack: Itemize by SMTP Server on PCALAKLH01/PackagingCorp(Release 
> 6.5.1|January 21, 2004) at
> 05/06/2005 04:04:27 AM,
> Serialize by Notes Client on Derek Catanzaro/LAK/PackagingCorp(Release
> 6.5.1|January 21, 2004) at 05/06/2005 11:21:02 AM,
> Serialize complete at 05/06/2005 11:21:02 AM
> Content-type: text/plain
> 
> Martin Hepworth wrote:
> 
>> Derek
>>
>> any difference in the rules you are running on the FC1 system to the FC2
>> system? Any extras in /etc/mail/spamassassin and any RBL's etc.
>> -- 
>> Martin Hepworth
>> Snr Systems Administrator
>> Solid State Logic
>> Tel: +44 (0)1865 842300
>>
>>
>> Derek Catanzaro wrote:
>>
>>> 2 MX servers with the following
>>>
>>> Dual 933Mhz 1 Gig of memory
>>> FC1 (mailscanner and spamassassin need to be upgraded)
>>> mailscanner-4.31.6-1
>>> spamassassin-2.63
>>>
>>> 1.7Mhz 512 Memory (desktop)
>>> FC2
>>> mailscanner-4.40.11-1
>>> spamassassin-3.0.2-1
>>>
>>> I am experiencing a slow down in the delivery/processing of email on my
>>> MailScanner servers. I receive roughly 50,000 emails on a daily basis
>>> and if there is a delay in the processing of any emails it can get
>>> backed up very quickly. I'm not sure if it is a DNS timing issue?,
>>> would anyone recommend using local DNS in this case, or does anyone use
>>> it and have they seen improvements? Can anyone recommend anything in
>>> the MailScanner.conf file that may help?
>>>
>>> I have "Max children" set to 10 on the server with dual process and 5 on
>>> the server with one processor, and "queue scan interval" is set to 6 on
>>> both servers as well. I am using Clamav as my virus scanner. Please
>>> let me know if you need additional info, and thanks in advance for your
>>> assistance.
>>>
>>> Derek
>>>
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website
> !

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!