Re: [exim] Serious Problems .. over 100,000 messages in the …

Pàgina inicial
Delete this message
Reply to this message
Autor: Andrew Rosolino
Data:  
A: exim-users
Assumpte: Re: [exim] Serious Problems .. over 100,000 messages in the queue

I added a RBL and it seriously blocked almost every single e-mail going out
and no one go their e-mail.
I tried using these "Reject mail at SMTP time if the sender host is in the
zen.spamhaus.org, or bl.spamcop.net rbl"

For some reason I had it set to accept for all users and just forward it.. i
have limited it to jsut a couple of users.



Martin.Hepworth wrote:
>
> Andrew
>
> Well this message is 'to' cashmakerclicks.com which DNS records show you
> handle.
>
> You may which to look at what users you accept email 'to', and reject at
> the exim level. I drop over 60% of my traffic this way.
>
> Have look at some tuning in SA, running a local caching nameserver on the
> SA machine is a much, only doing a few RBLs (two?) I also recommend.
>
> How much RAM have you got? 1GB per CPU core for a SA machine is normally
> recommended by my point of view.
>
> Also have a look at doing the SA checks at SMTP time, rather than a later
> callout. That way you can reject the message before it's accepted by the
> gateway.
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>> -----Original Message-----
>> From: exim-users-bounces@??? [mailto:exim-users-bounces@exim.org] On
>> Behalf Of Andrew Rosolino
>> Sent: 06 August 2007 09:54
>> To: exim-users@???
>> Subject: Re: [exim] Serious Problems .. over 100,000 messages in the
>> queue
>>
>>
>> For some reason it is only taking out like 20 emails per 10 minutes =(..
>> why
>> is it being so slow with this.. here is some of my configuration for the
>> queue
>>
>> queue_run_max = 15
>> deliver_queue_load_max = 20
>> auto_thaw = 1d
>> ignore_bounce_errors_after = 2d
>> timeout_frozen_after = 2d
>>
>>
>> Andrew Rosolino wrote:
>> >
>> > For some reason our queue has over 100,000 e-mail messages in at and
>> they
>> > are as old as 48 days!!!
>> > I have these variables set:
>> > deliver_queue_load_max = 10
>> > auto_thaw = 1d
>> > ignore_bounce_errors_after = 2d
>> > timeout_frozen_after = 2d
>> >
>> > There is also a bigger problem.. most of those e-mails are all SPAM
>> being
>> > sent from our server =(.. we are being badly abused!!!
>> >
>> > I have it set to delete SPAM messages and not deliver them but its not
>> > even deleting it.. I am using SpamAssasin by the way.. here is some
>> > headers
>> >
>> > Return-path: <nehpkbarnettsot@???>
>> > Received: from host83-206-dynamic.6-87-r.retail.telecomitalia.it
>> > ([87.6.206.83] helo=pcpiero)
>> >     by alpha2.shiftcode.com with esmtp (Exim 4.66)
>> >     (envelope-from <nehpkbarnettsot@???>)
>> >     id 1I15hM-0000EF-IO
>> >     for admin@???; Wed, 20 Jun 2007 15:18:37 -0400
>> > Received: from 67.28.113.14 (HELO mxvm3.mail.yahoo.com)
>> >      by cashmakerclicks.com with esmtp (;+P/J4/36A=: (:H1)
>> >      id R6,A-/-K(8G:0-L5
>> >      for admin@???; Wed, 20 Jun 2007 19:18:36 -0100
>> > Date:    Wed, 20 Jun 2007 19:18:36 -0100
>> > From:    "Timmy Key" <nehpkbarnettsot@???>
>> > X-Mailer: The Bat! (v3.71.14) Educational
>> > X-Priority: 3 (Normal)
>> > Message-ID: <943854241.15530397833888@???>
>> > To: admin@???
>> > Subject: Summer is almost here, be ready
>> > MIME-Version: 1.0
>> > Content-Type: multipart/alternative;
>> >   boundary="----------DAD329AD3293293"
>> > X-Spam: Not detected
>> > X-Spam-Subject: ***SPAM*** Summer is almost here, be ready
>> > X-Spam-Status: Yes, score=26.4
>> > X-Spam-Score: 264
>> > X-Spam-Bar: ++++++++++++++++++++++++++
>> > X-Spam-Report: Spam detection software, running on the system
>> > "alpha2.shiftcode.com", has
>> >     identified this incoming email as possible spam.  The original
>> message
>> >     has been attached to this so you can view it (if it isn't spam) or
>> label
>> >     similar future email.  If you have any questions, see
>> >     the administrator of that system for details.
>> >     Content preview:  Profit by your chance! - Anatrim - The up-to-the-
>> moment
>> > and
>> >     most exciting product for weighty people is now available - As told
>> on
>> > Oprah
>> >     Can you retain all the times when you plead to yourself to do any
>> thing
>> > for
>> >     being saved from this horrible number of lbs? Happily, now no major
>> > sacrifice
>> >     is demanded. With Anatrim, the ground-breaking, you can get
>> healthier
>> > mode
>> >     of life and a really slender figure. Notice what people say to us!
>> [...]
>> >     Content analysis details:   (26.4 points, 10.0 required)
>> >     pts rule name              description
>> >     ---- ----------------------
>> > --------------------------------------------------
>> >     3.5 BAYES_99               BODY: Bayesian spam probability is 99 to
>> 100%
>> >     [score: 1.0000]
>> >     4.3 RCVD_FORGED_WROTE2     RCVD_FORGED_WROTE2
>> >     2.8 RCVD_BAD_ID            RCVD_BAD_ID
>> >     2.5 RCVD_FORGED_WROTE      Forged 'Received' header found ('wrote:'
>> spam)
>> >     0.0 HS_INDEX_PARAM         URI: Link contains a common tracker
>> pattern.
>> >     0.0 HTML_MESSAGE           BODY: HTML included in message
>> >     1.4 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76
>> > chars
>> >     1.9 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL
>> > blocklist
>> >     [URIs: promfore.com]
>> >     1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL
>> > blocklist
>> >     [URIs: promfore.com]
>> >     1.5 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL
>> > blocklist
>> >     [URIs: promfore.com]
>> >     1.5 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL
>> > blocklist
>> >     [URIs: promfore.com]
>> >     0.5 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL
>> > blocklist
>> >     [URIs: promfore.com]
>> >     1.1 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old
>> > Bread)
>> >     [URIs: promfore.com]
>> >     0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
>> >     [87.6.206.83 listed in zen.spamhaus.org]
>> >     0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
>> > address
>> >     [87.6.206.83 listed in dnsbl.sorbs.net]
>> >     1.5 URIBL_SBL              Contains an URL listed in the SBL
>> blocklist
>> >     [URIs: promfore.com]
>> >     0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
>> >     dynamic-looking rDNS
>> >     0.5 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and
>> HTML
>> > X-Spam-Flag: YES

>> >
>> > alpha2.shiftcode.com is our server.. how can we stop this from
>> happening
>> > =(
>> >
>>
>> --
>> View this message in context: http://www.nabble.com/Serious-Problems-..-
>> over-100%2C000-messages-in-the-queue-tf4222242.html#a12012802
>> Sent from the Exim Users mailing list archive at Nabble.com.
>>
>>
>> --
>> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
>> ## Exim details at http://www.exim.org/
>> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
>
> --
> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>


--
View this message in context: http://www.nabble.com/Serious-Problems-..-over-100%2C000-messages-in-the-queue-tf4222242.html#a12029991
Sent from the Exim Users mailing list archive at Nabble.com.