[Greylist-users] Database performance

[Scot Shaeffer]

Hello,

Yes it seems the Sober worm is nasty, i have a qmail implementation with 
greylisting and we're doing a scan with ClamAV before it gets to the 
greylisting so virus mails are not making it that far (incoming)...  
however, i did just this morning receive a notice from a user unable to 
send out mail through our server now because we also have a RBL check 
installed.. the user's IP got blacklisted because their computer is 
infected.

I suspect that you may have some machines/users infected with Sober 
unfortunately.  For more info check out:
http://cbl.abuseat.org/nat.html
http://securityresponse.symantec.com/avcenter/venc/data/w32.sober.removal.tool.html

Regards,
Scot

Brian Ross wrote:

> The maintenance interval *exploded* with the latest Sober worm.  
> Originally this was taking about 20 minutes. :(
>
> We're still seeing ~13,000 copies of Sober.Z making it past the 
> greylist - you can only imagine what is getting blocked.
>
> But yes, help does seem to be in order and unfortunately our in-house 
> DBAs are Oraclists and don't seem interested in tainting their purity 
> by touching MySQL.  Perhaps I should just move the greylist DB to 
> Oracle.....
>
>
>
> William Blunn wrote:
>
>> Brian Ross wrote:
>>
>>> Hello,
>>>
>>> I was wondering if anyone has any performance tuning tips for the 
>>> MySQL db as implemented in relaydelay.
>>>
>>> We're running the db_maintenance script regularly, expiring 
>>> approximately 1.25 million rows on a nightly basis with the 
>>> maintenace taking approximately 1.5 hours.
>>>
>>> During the maintenance we're turning off our mail relays
>>
>>
>>
>> Turning off your mail relays for 1.5 hours every day?
>>
>> You're swamped. Get professional help. Fast.
>>
>> Bill
>> _______________________________________________
>> Greylist-users mailing list
>> Greylist-users at lists.puremagic.com
>> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users
>
>
>
> _______________________________________________
> Greylist-users mailing list
> Greylist-users at lists.puremagic.com
> http://lists.puremagic.com/cgi-bin/mailman/listinfo/greylist-users
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.puremagic.com/pipermail/greylist-users/attachments/20060105/f0adc8e3/attachment-0001.htm