<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.26.1.1">
</HEAD>
<BODY>
The children and batch size are about what you said.<BR>
<BR>
That's awesome, thank you Martin.<BR>
<BR>
You've been good help.<BR>
<BR>
<BR>
With regards,<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<HR NOSHADE SIZE="1">
<BR>
<BR>
<FONT COLOR="#000000">Kasper Eenberg</FONT><BR>
<BR>
<I><FONT SIZE="5"><FONT COLOR="#000080">HOVMARK DATA</FONT></FONT></I><BR>
<FONT COLOR="#000000">Ravnevej 13 </FONT><BR>
<FONT COLOR="#000000">dk-6705 Esbjerg Ø</FONT><BR>
<FONT COLOR="#000000">tlf: +45 76 12 59 04</FONT><BR>
<FONT COLOR="#000000">mobil: +45 40 70 69 63</FONT>
</TD>
</TR>
</TABLE>
<BR>
<BR>
On Fri, 2009-05-15 at 09:42 +0100, Martin Hepworth wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
Kasper
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
You should be able to do a lookup on the fly (look-a-head). How you do this depends on the MTA but there are lots of info on this in the wiki.
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
1GB ram won't help - be careful on the number of children and batch size, with 1GB ram you'll need to keep that down. maybe 2 children and 20 as the batch size.
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
-- <BR>
Martin Hepworth<BR>
Oxford, UK<BR>
<BR>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
2009/5/15 Kasper Sacharias Eenberg <<A HREF="mailto:kse@hovmark.dk">kse@hovmark.dk</A>>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE>
Unfortunately, we do not, completely that is.<BR>
<BR>
I implemented some user checking. But we have many mailservers running. Lotus Domino, Microsoft Exchange, Zarafa and simply postfix/dovecot.<BR>
It's a pain gathering from that many servers.<BR>
It's on my todo list though.<BR>
I'll prioritize it up.<BR>
<BR>
The main problem however, might be that the server only has 1GB of ram, for some reason or other.<BR>
The other spamfilters have better hardware, but this is used as our primary, until i set up replication of rules and such. And add more filters.<BR>
<BR>
Tuning has been done on all servers.
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE>
<BR>
<BR>
<BR>
With regards,<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<HR NOSHADE SIZE="1">
<BR>
<BR>
<BR>
<FONT COLOR="#000000">Kasper Eenberg</FONT><BR>
<BR>
<I><FONT SIZE="5"><FONT COLOR="#000080">HOVMARK DATA</FONT></FONT></I><BR>
<FONT COLOR="#000000">Ravnevej 13 </FONT><BR>
<FONT COLOR="#000000">dk-6705 Esbjerg Ø</FONT><BR>
<FONT COLOR="#000000">tlf: +45 76 12 59 04</FONT><BR>
<FONT COLOR="#000000">mobil: +45 40 70 69 63</FONT>
</TD>
</TR>
</TABLE>
<BR>
<BR>
<BR>
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE>
<BR>
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE>
On Fri, 2009-05-15 at 08:47 +0100, Martin Hepworth wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
Kasper<BR>
<BR>
<BR>
I presume you do things like drop unknown users at the MTA? This can reduce the load by well over 50%. Also have a look in the wiki about performance tuning MailScanner - local caching nameserver, using only a few RBL's etc etc.<BR>
<BR>
<BR>
--<BR>
Martin<BR>
<BR>
2009/5/15 Kasper Sacharias Eenberg <<A HREF="mailto:kse@hovmark.dk">kse@hovmark.dk</A>><BR>
<BLOCKQUOTE>
Thanks for the help.<BR>
<BR>
But i'm afraid this server is already way overloaded, and that this might kill it.<BR>
Are there any alternatives to this? Any rules i can write?<BR>
<BR>
Adding "To: @<A HREF="http://eurocargoservices.dk">eurocargoservices.dk</A> delete" does not work, as you say.<BR>
<BR>
<BR>
With regards, <BR>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<HR NOSHADE SIZE="1">
<BR>
<BR>
<BR>
<BR>
<FONT COLOR="#000000">Kasper Eenberg</FONT><BR>
<BR>
<I><FONT SIZE="5"><FONT COLOR="#000080">HOVMARK DATA</FONT></FONT></I><BR>
<FONT COLOR="#000000">Ravnevej 13 </FONT><BR>
<FONT COLOR="#000000">dk-6705 Esbjerg Ø</FONT><BR>
<FONT COLOR="#000000">tlf: +45 76 12 59 04</FONT><BR>
<FONT COLOR="#000000">mobil: +45 40 70 69 63</FONT>
</TD>
</TR>
</TABLE>
<BR>
<BR>
<BR>
<BR>
On Wed, 2009-05-13 at 09:59 +0100, Martin Hepworth wrote: <BR>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
Best way to avoid this situation is split the email up into individual recipients and then the rules on forwarding will work fine. The problem is if the 'to' contains multiple recipients and gives conflicting actions eg deliver and not-deliver which one should it obey???? MailScanner can't get which one is correct so uses the Envelope-To: as the overriding value.<BR>
<BR>
<BR>
How to split the emails up is dependant on the MTA you use but sendmail, Exim and Postfix are covered in the wiki (<A HREF="http://wiki.mailscanner.info/doku.php?id=&idx=documentation:configuration:mta">http://wiki.mailscanner.info/doku.php?id=&idx=documentation:configuration:mta</A>)<BR>
<BR>
<BR>
-- <BR>
Martin Hepworth<BR>
Oxford, UK<BR>
<BR>
2009/5/13 Kasper Sacharias Eenberg <<A HREF="mailto:kse@hovmark.dk">kse@hovmark.dk</A>><BR>
<BLOCKQUOTE>
So, i embarassed myself to my company yesterday.<BR>
<BR>
I managed to write a highscore rule that passed on all spam mails, that it should be dropping.<BR>
But nevermind that.<BR>
<BR>
<BR>
My problem is, i have two domains.<BR>
<A HREF="http://eurocargoservices.de">eurocargoservices.de</A><BR>
<A HREF="http://eurocargoservices.dk">eurocargoservices.dk</A><BR>
<BR>
The .de company wants to receive all spam mails. They receive alot of mails from China and russia, which normally get tagged as spam (Since i took over the filter it now work quite well though, ignoring them).<BR>
<BR>
<BR>
However, som spam mails are sent with both the .de and .dk domain in the 'to' header.<BR>
And when the .de domain is in the recipient, the rule that delivers mail to .de takes action, and the spam is delivered to the .dk.<BR>
<BR>
It seems "Use Default Rules With Multiple Recipients = yes" does not work.<BR>
<BR>
These are the rules:<BR>
To: @<A HREF="http://eurocargoservices.de">eurocargoservices.de</A> deliver<BR>
FromOrTo: default forward <A HREF="mailto:isspam@localhost">isspam@localhost</A><BR>
<BR>
<BR>
Live long and prosper,<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<HR NOSHADE SIZE="1">
<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
<FONT COLOR="#000000">Kasper Eenberg</FONT><BR>
<BR>
<I><FONT SIZE="5"><FONT COLOR="#000080">HOVMARK DATA</FONT></FONT></I><BR>
<FONT COLOR="#000000">Ravnevej 13 </FONT><BR>
<FONT COLOR="#000000">dk-6705 Esbjerg Ø</FONT><BR>
<FONT COLOR="#000000">tlf: +45 76 12 59 04</FONT><BR>
<FONT COLOR="#000000">mobil: +45 40 70 69 63</FONT>
</TD>
</TR>
</TABLE>
<BR>
<BR>
<BR>
--<BR>
MailScanner mailing list<BR>
<A HREF="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR>
<A HREF="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR>
<BR>
Before posting, read <A HREF="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR>
<BR>
Support MailScanner development - buy the book off the website!<BR>
<BR>
</BLOCKQUOTE>
<BR>
<BR>
<BR>
<BR>
<BR>
</BLOCKQUOTE>
<BR>
--<BR>
MailScanner mailing list<BR>
<A HREF="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR>
<A HREF="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR>
<BR>
Before posting, read <A HREF="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR>
<BR>
Support MailScanner development - buy the book off the website!<BR>
<BR>
</BLOCKQUOTE>
<BR>
<BR>
<BR>
-- <BR>
Martin Hepworth<BR>
Oxford, UK<BR>
<BR>
</BLOCKQUOTE>
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BLOCKQUOTE>
<BR>
--<BR>
MailScanner mailing list<BR>
<A HREF="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR>
<A HREF="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR>
<BR>
Before posting, read <A HREF="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR>
<BR>
Support MailScanner development - buy the book off the website!<BR>
<BR>
</BLOCKQUOTE>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<BR>
<BR>
<BR>
<BR>
<BR>
</BLOCKQUOTE>
</BODY>
</HTML>