Date: Wed, 7 Dec 2005 16:18:36 -0800 From: "jdow" <jdow@earthlink.net> To: "Vahric MUHTARYAN" <vahric@doruk.net.tr>, <freebsd-questions@freebsd.org> Subject: Re: hardening FreeBSD for Spamassassin Message-ID: <04e401c5fb8c$ef3c5930$1225a8c0@kittycat> References: <200512071850.1eK93919y3Nl34b0@mx-clapper.atl.sa.earthlink.net>
next in thread | previous in thread | raw e-mail | index | archive | help
You are going to have to trim numbers of messages before you get to
SpamAssassin, I am afraid. Is this number after any greylisting you
may have operational? If not then do look into greylisting. It is a
very powerful technique to prefilter your incoming email at the
connection level. If the address is recognize the email is received
immediately. If it is not recognized the email is "temporarily failed".
Currently spammers do not retry in such cases. So at least for now this
will be a very effective tool to trim down the number of messages your
SpamAssassin install has to filter.
You will have to trim the number of rule sets you use to a bare
minimum. They do take time to run. If I extrapolate my system's
usage and configuration to a 4 processor 3GHz level machine I am
still about an order of magnitude shy of your requirements as I
am currently configured. So the level of rules trimming would be
daunting indeed. (But at least I have not missed a genuine spam
detection in two weeks now. And I've only had about 5 very spammy
looking kernel mailing list type messages that false alarmed. It
is hard to deal with filtering lists that just look like spam and
do not filter incoming messages. {^_-})
As for trimming FreeBSD to a minimum the usual litanies exist, do
not start any services you do not need. One BIG hog in this regard,
obviously, is X11. If it is not absolutely needed don't start it.
You should not even have it on the system. Only you know if nfs
is required in your setup or not, of course. So you must make the
assessment of "is this needed" for yourself. With four gigabytes
of ram and (only) four processors you're probably not memory
limited on a CPU intensive operation. So kernel trimming is
probably not going to be a high benefit process, at a guess.
Oh yes, one thing you DO want to run is your own DNS server
implementation of the "SURBL" lists. That volume of email quite
justifies requesting Jeff allow you to download his database to
your machine periodically. That will GREATLY speed up the DNS
tests, of course. You might check this out at http://www.surl.org/.
Jeff's a good fellow with a STRONG "no collateral damage" ethic.
Go for greylisting first then Jeff's database downloads.
{^_^}
----- Original Message -----
From: "Vahric MUHTARYAN" <vahric@doruk.net.tr>
> Thanks Joanne ,
>
> Exactly I red Spamassassin FAQ and they said that 20-30 MB memory
> must for each child process also iowait and CPU is really important but
> mailn purpose is RAM, you are right ...
>
> And sorry I heared but I did not use exactly spamc & spamd , also I
> will care about your words and advise about mailing list , but my questions
> is not fully How fast can I run SA , my question is get out something from
> FreeBSD which is not need for only SA run on system, I mean optimizing
> system for only special works , maybe more little kernel , maybe it looks
> like freebsd from screch (I think wrong word )...or maybe How can I
> optimize and have more small and faster running FreeBSD OS ...
>
> And I want to handle 130,000 mail/hour with using 2 or 4 P4 server
> with raid1 and 2 or 4 gb ram .
>
> Thanks again :)
> Vahric
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?04e401c5fb8c$ef3c5930$1225a8c0>