<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Custom Perl script reading the sendmail logs and an Excel spreadsheet. Very old school.</div><div><br></div><div>-- Derek</div><br><div><div>On Dec 12, 2009, at 4:51 AM, Monis Monther wrote:</div><blockquote type="cite"><div dir="ltr">What do you use to monitor all of this???<br><br><div class="gmail_quote">On Fri, Dec 11, 2009 at 11:19 PM, Derek Chee <span dir="ltr"><<a href="mailto:dchee@uci.edu">dchee@uci.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left-width: 1px; border-left-style: solid; border-left-color: rgb(204, 204, 204); margin-top: 0pt; margin-right: 0pt; margin-bottom: 0pt; margin-left: 0.8ex; padding-left: 1ex; position: static; z-index: auto; "><div class="im">On Dec 11, 2009, at 10:35 AM, Gottschalk, David wrote:<br>
> I'm wondering though how other colleges are handling their mail filtering using MailScanner. How many machines are being used, etc, etc?<br>
<br>
</div>At UC Irvine, we have four Sendmail+MailScanner external email gateways. We don't have a load balancer, just MX records. The four servers are not identical so we occasionally have unbalanced load issues, but nothing of major concern. We run ClamAV as a milter with most of the SaneSecurity signatures, Spamhaus ZEN RBL for blocking, internal block list, greylisting, connection throttling (too many, too soon, too many bad, etc.) and SpamAssassin (just tagging, no quarantine).<br>
<br>
According to the the latest stats, we blocked 6.7 million connections/messages last week through whatever means. Accepted 2.3 million messages and marked 136k of those as spam. These numbers are not peak numbers. We had a dramatic drop off in spam in September 2008. Before that time, we were rejecting around 4 million connections/messages per day with the same set of four servers, while the number of accepted messages stayed the same. I really couldn't tell you how many mailboxes we protect as the gateways protect multiple servers at UC Irvine and I've never counted all of the potential accounts.<br></blockquote></div></div></blockquote></div><br></body></html>