Results 1 to 4 of 4

Thread: Antispam capacity/performance

  1. #1
    Join Date
    Sep 2006
    Posts
    18
    Rep Power
    9

    Default Antispam capacity/performance

    We currently have a domain that gets 3.5 Million directory harvesting spam messages a month. We have a SMTP filter in front of the current mail server just for this reason.

    How does Zimbra handle directory harvesting and could it handle the existing volume? The network edition seems to be what we want but I am concerned about this.

    Thanks in advance,

    Derek

  2. #2
    dijichi2 is offline OpenSource Builder & Moderator
    Join Date
    Oct 2005
    Posts
    1,176
    Rep Power
    12

    Default

    as long as you don't set catchall for the domain, postfix should reject this before amavis handoff, so the hit should be negligable. still, that's a fair amount of hits, can you not keep the filter in place? if not, with reasonable hardware it should cope fine - it works out to just over 1 a second which isn't too bad.

  3. #3
    Join Date
    Sep 2006
    Posts
    18
    Rep Power
    9

    Default

    Since Zimbra can handle multiple domains we were thinking of combing them. The filter would be sort of redundant at that point. Yes we can keep it there however.

    I wish we could affectively deal with that domain. It stinks that all the owners of the company use it for just them. CPU time on the machine that it runs on hovers around 65% all the time. Trend Micro will be releasing a BotNet tool next month and Spamhaus will be doing something soon too. Not soon enough.

    Derek

  4. #4
    dijichi2 is offline OpenSource Builder & Moderator
    Join Date
    Oct 2005
    Posts
    1,176
    Rep Power
    12

    Default

    i'm very surprised that little over 1 spam a second that should easily be rejected by a (cached) lookup map should load the cpu so highly. unless i'm missing something, a domain that caters for a few company owners, with catchall turned off, should be very easy to deal with such dictionary attacks.

    with zimbra/postfix I've seen domains with catchall turned on certainly kill the machine quickly like this primarily because of the antivirus/spam checks, but for other domains without catchall i've seen very large dictionary attacks (thousands/hr) dealt without the machine batting an eyelid, and it's very underspecced too.

Similar Threads

  1. Replies: 13
    Last Post: 07-20-2007, 04:21 AM
  2. Replies: 2
    Last Post: 06-19-2007, 09:45 PM
  3. upgrade to 4.0.3 antispam does'nt work
    By lucanannipieri in forum Administrators
    Replies: 14
    Last Post: 11-07-2006, 03:56 AM
  4. antispam not working?
    By moebis in forum Installation
    Replies: 16
    Last Post: 12-03-2005, 08:11 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •