ssilva at sgvwater.com
Wed Aug 1 22:13:18 IST 2007
UxBoD spake the following on 8/1/2007 1:27 PM:
> Today, our secondary MX, was hit by a large SPAM storm. The message subject was all the same so I presume a new set of bots was unleashed.
> Anyway, I saw the inbound queue jump up to 1000, and MailScanner stop logging anything too /var/log/maillog. I reloaded MS and it began to process again. After getting through ~ 250 messages it started building up again. I checked running processes and all the MS processes were running, but they all said Checking SPAM lists.
> My settings are the same on both primary and secondary, the only difference being hardware processing power.
> Primary is a dual Opteron 8GB RAM, children set @ 20 with a 100 message batch size and all okay. Secondary is single P4 with 1GB RAM, children set @ 5 with a 25 message batch size.
> Has anybody seen this before? We have ordered a matching server to replace the secondary but that is on a two week lead time. Any ideas?
> I will run a strace tomorrow if it happens again to see where it is sticking.
Are you running any optimizations on the servers, like dnsbl's on the MTA or
greylisting? Anything that might stop stuff before it gets to the queue will
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!
More information about the MailScanner