Mqueue.in just keeps growing...

[Peter Nitschke]

Bottom line is that you are being hammered.

Temporarily block port 25 until you can get the mess cleaned out.

Reduce the number of MS children as it sounds like you may have too many,
also reduce the number of mails per scan.  That's part of your high load
problem.

Add or adjust these in sendmail.mc 

define(`confQUEUE_LA',`3')dnl
define(`confREFUSE_LA',`3')dnl
define(`confTO_IDENT', `0')dnl
define(`confTO_INITIAL', `2m')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTO_ACONNECT', `2m')dnl
define(`confTO_ICONNECT', `1m')dnl
define(`confTO_HELO', `1m')dnl
define(`confTO_MAIL', `1m')dnl
define(`confTO_RCPT', `1m')dnl
define(`confTO_DATAINIT', `2m')dnl
define(`confTO_DATABLOCK', `2m')dnl
define(`confTO_DATAFINAL', `2m')dnl
define(`confTO_RSET', `1m')dnl
define(`confTO_QUIT', `1m')dnl
define(`confTO_MISC', `1m')dnl
define(`confTO_COMMAND', `1m')dnl
define(`confTO_CONTROL', `1m')dnl
define(`confTO_LHLO', `1m')dnl
define(`confMAX_DAEMON_CHILDREN',`50')dnl
define(`confCONNECTION_RATE_THROTTLE',`20')dnl

define(`confBAD_RCPT_THROTTLE',`2')dnl
FEATURE(`conncontrol', ,`terminate')dnl

FEATURE(`dnsbl', `bl.spamcop.net', `"Rejected "$&{client_addr}" by
bl.spamcop.net"')dnl
FEATURE(`dnsbl', `zen.spamhaus.org',`"Rejected "$&{client_addr}" by
zen.spamhaus.org"')dnl

Add this to /etc/mail/access
ClientConn:             4
ClientRate:             10
ClientRate:127.0.0.1    0


Then run  "make -C /etc/mail"

Restart MailScanner.

This stuff protects my server very well.

Peter


*********** REPLY SEPARATOR  ***********

On 9/10/2008 at 1:58 AM Max Kipness wrote:

>>How's your caching dns performance? Have you updated spamassassin?  
>
>>What additional rules or plugins are you running? -- 
>
> 
>
>Well I followed a lot of the suggestions for increasing performance, and
>although MailScanner is working a little better, it still cannot keep
>up. DNS performance is quick. I do not have the latest spamassassin
>version, but based on the fact that most spam is being caught by
>Sendmail now (as described below), I wouldn't think that is the problem.
>
> 
>
>I added the greeting delay to sendmail, am now checking Spamcop and XBL
>at Sendmail level, and although tons of spam is now being caught before
>getting to MailScanner, my mqueue.in is at 30k, incoming is at a
>constant 180 and now mqueue is hovering around 2k. Mail is coming
>through but way too slow. Also, cpu is just pegged at 100% with several
>MailScanner processes, Sendmail processes, and kblockd/0 and kblockd/1
>splitting up all cpu. I'm starting to wonder if after the reboot
>something has degraded my disk performance and now there isn't enough
>cpu for MailScanner to handle the number of messages coming in?
>
> 
>
>I may have to resort to setting up MailScanner on another system at this
>point.
>
> 
>
>Thanks for all the suggestions, and if anyone has any other ideas,
>please let me know.
>
> 
>
>Thanks,
>
>Max
>
>
>-- 
>MailScanner mailing list
>mailscanner at lists.mailscanner.info
>http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>Before posting, read http://wiki.mailscanner.info/posting
>
>Support MailScanner development - buy the book off the website!