I have found that since I added the surbl perl script to my exim config
that some messages take massive ammounts of CPU in exim.
I have removed the data acl scanning portion and have found that the
mime portion is more effective and less prone to this massive cpu usage.
Below are the headers from a message that takes me 30+ minutes to scan
on a 2.4G HT box w/ 1G ram on a FreeBSD 6.1-p2 box.
Return-Path: <thelogans@???>
Delivered-To: eaa@???
Received: (qmail 27585 invoked by uid 0); 13 Jul 2006 17:53:09 -0000
Received: from unknown (HELO c.mx.poklib.org) (64.72.87.254)
by vhnet.mx with SMTP; 13 Jul 2006 17:53:09 -0000
Received: from mtiwmhc11.worldnet.att.net ([204.127.131.115])
by c.mx.poklib.org with esmtp (Exim 4.62; FreeBSD)
(envelope-from <thelogans@???>) id 1G14tw-000FxS-Il
for eaa@??? ; Thu, 13 Jul 2006 13:53:09 -0400
Received: from mwebmail15.att.net ([204.127.135.41])
by worldnet.att.net (mtiwmhc11) with SMTP
id <20060712201541111004ahvqe>; Wed, 12 Jul 2006 20:15:41 +0000
Received: from [12.76.143.48] by mwebmail15.att.net;
Wed, 12 Jul 2006 20:15:40 +0000
X-Virus-Check: ClamAV 0.88.2/1598 on c.mx.poklib.org; Thu, 13 Jul 2006
13:53:09 -0400
From: thelogans@???
Subject: Fwd: FW: The Sex Fairy
Date: Wed, 12 Jul 2006 20:15:40 +0000
Message-Id:
<071220062015.11304.44B5586B00020ACC00002C2821587667209C020E0901040A089B@???>
X-Mailer: AT&T Message Center Version 1 (Feb 28 2006)
X-Authenticated-Sender: dGhlbG9nYW5zQGF0dC5uZXQ=
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="NextPart_Webmail_9m3u9jl4l_11304_1152735340_0"
X-MIME-Count: 0
X-MIME-Count: 1
X-MIME-Count: 2
X-MIME-Count: 3
X-MIME-Count: 4
X-MIME-Count: 5
X-MIME-Character-set: US-ASCII
X-MIME-Character-set: iso-8859-1
#EOF
Below is my acl_check_mime on the exim server:
###
### START ACL MIME
###
acl_check_mime:
# Decode MIME parts to disk. This will support virus scanners later.
warn decode = default
warn message = X-MIME-Character-set: $mime_charset
condition = ${if eq{$mime_charset}{}{0}{1}}
# not sure if this is working as intendted
accept condition = ${if >={$mime_part_count}{15}{1}{0}}
# SURBL Check
deny set acl_m0 = ${perl{surblspamcheck}}
message = $acl_m0
condition = ${if eq{$acl_m0}{false}{no}{yes}}
log_message = SURBL URL mime
accept
#EOF
We are delivering to a qmail box (for what it's worth)
2006-07-13 13:23:00 SMTP connection from [204.127.131.115] (TCP/IP
connection count = 39)
2006-07-13 13:53:09 1G14tw-000FxS-Il <= thelogans@???
H=mtiwmhc11.worldnet.att.net [204.127.131.115] P=esmtp S=127246
id=071220062015.11304.44B5586B00020ACC00002C2821587667209C020E0901040A089B@???
T="Fwd: FW: The Sex Fairy"
2006-07-13 13:53:09 1G14tw-000FxS-Il => eaa@??? R=bsd_manual_route
T=bsd_smtp H=64.72.68.14 [64.72.68.14] QT=30m9s DT=0s
2006-07-13 13:53:09 1G14tw-000FxS-Il Completed
http://extraball.sunsite.dk/notepad.php?ID=19040&parse=c has a pasted
output of what mutt shows the attachments are; something like 64 parts..
--
() ascii ribbon campaign - against html e-mail
/\
www.asciiribbon.org - against proprietary attachments
