You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Rick Beebe <ri...@yale.edu> on 2004/12/01 16:26:30 UTC
Re: New Hardware
Ronan wrote:
>>> Hey list,
>>> I am in the quite sureal situation of being given a blank
>>> cheque by my boss to buy 2 new servers for SA. They were so impressed
>>> with the upgrade to v3 + SURIBLS et al that when i said that our
>>> current setup was hitting load max they found some cash for me... :D
>>
>>> We are in a university environment with over 100,000 mails daily.
>>
>>> What Im currently looking at is either 2 Sun v150s or 2 dual-opterons
>>> probably with a gig each, and the standard 80+gigs.
I'm using a single HP DL380 with four 3Ghz Xeons and 4 gigs of RAM
running Linux (Suse 9.0). It easily handles 150,000 messages a day with
plenty of room for growth. For redundancy I have the SA setup mirrored
on another machine (which is normally doing something else). In case the
primary fails I'll simply have the backup machine alias the IP address.
At this point I don't need the load balancing of two active machines.
>> BTW were you able to get your local mirroring of the SURBL zones
>> working well?
>
> Im a systems guy so im still waiting on my network co-horts to get back
> to me. They want to see how the load of the bind files works out before
> they venture into rbldnsd, i dont have an account on our DNS so I'll
> have to make a case for it to be installed on the DNS otherwise I could
> just setup a local machine and have the DNS point to it...
I put the SURBL zones right on the SA machine. It's running bind and
rbldns. No changes to our DNS servers needed and it's easier for me to
make sure updates are happening.
--
_______________________________________________________________________
Rick Beebe (203) 785-6416
Manager, Systems & Network Engineering FAX: (203) 785-3481
ITS-Med Production Systems Richard.Beebe@yale.edu
Yale University School of Medicine
Suite 124, 100 Church Street South http://its.med.yale.edu
New Haven, CT 06519
_______________________________________________________________________
Re: New Hardware
Posted by Nix <ni...@esperi.org.uk>.
On Wed, 1 Dec 2004, Jeff Chan muttered drunkenly:
> On Wednesday, December 1, 2004, 8:17:14 AM, Ronan Ronan wrote:
>> how do i check whether SA is using
>> the locally stored file or whether is still querying the surbl.org DNS?
>> Is there an easy way if your not a bind / DNS guru?
>
> A dig may tell what name server it thinks it's using.
dig explicitly doesn't use the libc resolver library :(
`dnstracer', among other tools, should tell you (look at the first line
in the output).
--
`The sword we forged has turned upon us
Only now, at the end of all things do we see
The lamp-bearer dies; only the lamp burns on.'
Re: New Hardware
Posted by Jeff Chan <je...@surbl.org>.
On Wednesday, December 1, 2004, 8:17:14 AM, Ronan Ronan wrote:
> how do i check whether SA is using
> the locally stored file or whether is still querying the surbl.org DNS?
> Is there an easy way if your not a bind / DNS guru?
A dig may tell what name server it thinks it's using.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Re: New Hardware
Posted by Ronan <r....@qub.ac.uk>.
Martin Hepworth wrote:
>
> Ronan wrote:
> <snip>
>
>> Ok well I hounded or DNS guys to finally put multi.surbls.org into the
>> dns(as a master), watched him HUP named and then....
>>
>> should i notice a difference??
>> im still getting 10+ seconds scantime on some messages..
>> how do i tell if its working?
well granted i shot a message off too soon to the list, it does appear
to be just the big messages... but how do i check whether SA is using
the locally stored file or whether is still querying the surbl.org DNS?
Is there an easy way if your not a bind / DNS guru?
>>
>
> message size issues???
>
> if you can trap one of the longer scanning emails, you should be able to
> run it through the scanner by doing
>
> spamassassin -D file
>
> and get some indication of where it's slow..
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
>
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
--
Regards
Ronan McGlue
==============
Analyst/Programmer
Information Services
Queens University Belfast
BT7 1NN
Re: New Hardware
Posted by Martin Hepworth <ma...@solid-state-logic.com>.
Ronan wrote:
<snip>
> Ok well I hounded or DNS guys to finally put multi.surbls.org into the
> dns(as a master), watched him HUP named and then....
>
> should i notice a difference??
> im still getting 10+ seconds scantime on some messages..
> how do i tell if its working?
>
message size issues???
if you can trap one of the longer scanning emails, you should be able to
run it through the scanner by doing
spamassassin -D file
and get some indication of where it's slow..
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
Re: New Hardware
Posted by Ronan <r....@qub.ac.uk>.
Rick Beebe wrote:
> Ronan wrote:
>
>>>> Hey list,
>>>> I am in the quite sureal situation of being given a blank
>>>> cheque by my boss to buy 2 new servers for SA. They were so
>>>> impressed with the upgrade to v3 + SURIBLS et al that when i said
>>>> that our current setup was hitting load max they found some cash for
>>>> me... :D
>>>
>>>
>>>> We are in a university environment with over 100,000 mails daily.
>>>
>>>
>>>> What Im currently looking at is either 2 Sun v150s or 2
>>>> dual-opterons probably with a gig each, and the standard 80+gigs.
>
>
> I'm using a single HP DL380 with four 3Ghz Xeons and 4 gigs of RAM
> running Linux (Suse 9.0). It easily handles 150,000 messages a day with
> plenty of room for growth. For redundancy I have the SA setup mirrored
> on another machine (which is normally doing something else). In case the
> primary fails I'll simply have the backup machine alias the IP address.
> At this point I don't need the load balancing of two active machines.
>
>>> BTW were you able to get your local mirroring of the SURBL zones
>>> working well?
Ok well I hounded or DNS guys to finally put multi.surbls.org into the
dns(as a master), watched him HUP named and then....
should i notice a difference??
im still getting 10+ seconds scantime on some messages..
how do i tell if its working?
>>
>>
>> Im a systems guy so im still waiting on my network co-horts to get
>> back to me. They want to see how the load of the bind files works out
>> before they venture into rbldnsd, i dont have an account on our DNS so
>> I'll have to make a case for it to be installed on the DNS otherwise I
>> could just setup a local machine and have the DNS point to it...
>
>
> I put the SURBL zones right on the SA machine. It's running bind and
> rbldns. No changes to our DNS servers needed and it's easier for me to
> make sure updates are happening.
>
--
Regards
Ronan McGlue
==============
Analyst/Programmer
Information Services
Queens University Belfast
BT7 1NN