I added a RBL and it seriously blocked almost every single e-mail going out
and no one go their e-mail.
I tried using these "Reject mail at SMTP time if the sender host is in the
zen.spamhaus.org, or bl.spamcop.net rbl"
For some reason I had it set to accept for all users and just forward it.. i
have limited it to jsut a couple of users.
Martin.Hepworth wrote:
>
> Andrew
>
> Well this message is 'to' cashmakerclicks.com which DNS records show you
> handle.
>
> You may which to look at what users you accept email 'to', and reject at
> the exim level. I drop over 60% of my traffic this way.
>
> Have look at some tuning in SA, running a local caching nameserver on the
> SA machine is a much, only doing a few RBLs (two?) I also recommend.
>
> How much RAM have you got? 1GB per CPU core for a SA machine is normally
> recommended by my point of view.
>
> Also have a look at doing the SA checks at SMTP time, rather than a later
> callout. That way you can reject the message before it's accepted by the
> gateway.
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>> -----Original Message-----
>> From: exim-users-bounces@??? [mailto:exim-users-bounces@exim.org] On
>> Behalf Of Andrew Rosolino
>> Sent: 06 August 2007 09:54
>> To: exim-users@???
>> Subject: Re: [exim] Serious Problems .. over 100,000 messages in the
>> queue
>>
>>
>> For some reason it is only taking out like 20 emails per 10 minutes =(..
>> why
>> is it being so slow with this.. here is some of my configuration for the
>> queue
>>
>> queue_run_max = 15
>> deliver_queue_load_max = 20
>> auto_thaw = 1d
>> ignore_bounce_errors_after = 2d
>> timeout_frozen_after = 2d
>>
>>
>> Andrew Rosolino wrote:
>> >
>> > For some reason our queue has over 100,000 e-mail messages in at and
>> they
>> > are as old as 48 days!!!
>> > I have these variables set:
>> > deliver_queue_load_max = 10
>> > auto_thaw = 1d
>> > ignore_bounce_errors_after = 2d
>> > timeout_frozen_after = 2d
>> >
>> > There is also a bigger problem.. most of those e-mails are all SPAM
>> being
>> > sent from our server =(.. we are being badly abused!!!
>> >
>> > I have it set to delete SPAM messages and not deliver them but its not
>> > even deleting it.. I am using SpamAssasin by the way.. here is some
>> > headers
>> >
>> > Return-path: <nehpkbarnettsot@???>
>> > Received: from host83-206-dynamic.6-87-r.retail.telecomitalia.it
>> > ([87.6.206.83] helo=pcpiero)
>> > by alpha2.shiftcode.com with esmtp (Exim 4.66)
>> > (envelope-from <nehpkbarnettsot@???>)
>> > id 1I15hM-0000EF-IO
>> > for admin@???; Wed, 20 Jun 2007 15:18:37 -0400
>> > Received: from 67.28.113.14 (HELO mxvm3.mail.yahoo.com)
>> > by cashmakerclicks.com with esmtp (;+P/J4/36A=: (:H1)
>> > id R6,A-/-K(8G:0-L5
>> > for admin@???; Wed, 20 Jun 2007 19:18:36 -0100
>> > Date: Wed, 20 Jun 2007 19:18:36 -0100
>> > From: "Timmy Key" <nehpkbarnettsot@???>
>> > X-Mailer: The Bat! (v3.71.14) Educational
>> > X-Priority: 3 (Normal)
>> > Message-ID: <943854241.15530397833888@???>
>> > To: admin@???
>> > Subject: Summer is almost here, be ready
>> > MIME-Version: 1.0
>> > Content-Type: multipart/alternative;
>> > boundary="----------DAD329AD3293293"
>> > X-Spam: Not detected
>> > X-Spam-Subject: ***SPAM*** Summer is almost here, be ready
>> > X-Spam-Status: Yes, score=26.4
>> > X-Spam-Score: 264
>> > X-Spam-Bar: ++++++++++++++++++++++++++
>> > X-Spam-Report: Spam detection software, running on the system
>> > "alpha2.shiftcode.com", has
>> > identified this incoming email as possible spam. The original
>> message
>> > has been attached to this so you can view it (if it isn't spam) or
>> label
>> > similar future email. If you have any questions, see
>> > the administrator of that system for details.
>> > Content preview: Profit by your chance! - Anatrim - The up-to-the-
>> moment
>> > and
>> > most exciting product for weighty people is now available - As told
>> on
>> > Oprah
>> > Can you retain all the times when you plead to yourself to do any
>> thing
>> > for
>> > being saved from this horrible number of lbs? Happily, now no major
>> > sacrifice
>> > is demanded. With Anatrim, the ground-breaking, you can get
>> healthier
>> > mode
>> > of life and a really slender figure. Notice what people say to us!
>> [...]
>> > Content analysis details: (26.4 points, 10.0 required)
>> > pts rule name description
>> > ---- ----------------------
>> > --------------------------------------------------
>> > 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to
>> 100%
>> > [score: 1.0000]
>> > 4.3 RCVD_FORGED_WROTE2 RCVD_FORGED_WROTE2
>> > 2.8 RCVD_BAD_ID RCVD_BAD_ID
>> > 2.5 RCVD_FORGED_WROTE Forged 'Received' header found ('wrote:'
>> spam)
>> > 0.0 HS_INDEX_PARAM URI: Link contains a common tracker
>> pattern.
>> > 0.0 HTML_MESSAGE BODY: HTML included in message
>> > 1.4 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76
>> > chars
>> > 1.9 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
>> > blocklist
>> > [URIs: promfore.com]
>> > 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL
>> > blocklist
>> > [URIs: promfore.com]
>> > 1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
>> > blocklist
>> > [URIs: promfore.com]
>> > 1.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL
>> > blocklist
>> > [URIs: promfore.com]
>> > 0.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL
>> > blocklist
>> > [URIs: promfore.com]
>> > 1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old
>> > Bread)
>> > [URIs: promfore.com]
>> > 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
>> > [87.6.206.83 listed in zen.spamhaus.org]
>> > 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
>> > address
>> > [87.6.206.83 listed in dnsbl.sorbs.net]
>> > 1.5 URIBL_SBL Contains an URL listed in the SBL
>> blocklist
>> > [URIs: promfore.com]
>> > 0.1 RDNS_DYNAMIC Delivered to trusted network by host with
>> > dynamic-looking rDNS
>> > 0.5 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and
>> HTML
>> > X-Spam-Flag: YES
>> >
>> > alpha2.shiftcode.com is our server.. how can we stop this from
>> happening
>> > =(
>> >
>>
>> --
>> View this message in context: http://www.nabble.com/Serious-Problems-..-
>> over-100%2C000-messages-in-the-queue-tf4222242.html#a12012802
>> Sent from the Exim Users mailing list archive at Nabble.com.
>>
>>
>> --
>> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
>> ## Exim details at http://www.exim.org/
>> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
>
> --
> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>
--
View this message in context:
http://www.nabble.com/Serious-Problems-..-over-100%2C000-messages-in-the-queue-tf4222242.html#a12029991
Sent from the Exim Users mailing list archive at Nabble.com.
