spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bowie Bailey <Bowie_Bai...@BUC.com>
Subject RE: HELP!! spamasssin killing my server
Date Wed, 11 Jun 2008 13:06:42 GMT
Matthias Leisi wrote:
> 
> A couple of notes:
> 
> 1) This advice:
> 
> > Tue Jun 10 14:55:36 2008 [72096] dbg: conf: trusted_networks are not
> > configured; it is recommended that you configure trusted_networks
> > manually 
> 
> should not be ignored. Setting trusted_networks would slightly reduce
> the number of DNS lookups and can avoid all sorts of funny error
> situations.

Agreed.  "trusted_networks" is a key setting for quite a few of the
network based tests.  If you don't set it manually, SA takes a guess at
it and can get it wrong (especially if your server is behind a NAT
firewall).

> 3) Do you reject connections at the MTA level with a selection of
> blacklists (eg sbl/xbl/pbl/zen.spamhaus.org) and/or other means? This
> should greatly reduce the workload on SpamAssassin.

You should definitely consider this if you don't have it in place
already.  I recommend zen.spamhaus.org.  This one blacklist gets rid of
most of my spam and I haven't found a false hit yet.

I had a similar situation to you.  There was too much garbage coming in
and the server couldn't keep up with spam and virus scans for all of it.
I solved the problem by adding the zen blacklist.

-- 
Bowie

Mime
View raw message