Re: smtp time spam filtering
On Thu 2007-02-22 12:57:34 -0500 Greg Folkert wrote:
> On Thu, 2007-02-22 at 16:38 +0000, David Hart wrote:
> > On Thu 2007-02-22 10:33:34 -0500 Greg Folkert wrote:
>
> > I can't see any advantage in scanning during smtp connect time.
> > By the time you've got the DATA you've used up the bandwidth and might
> > as well accept it.
>
> Not really, I've got usage data dating back to Sasser. Significantly
> lower bandwidth once I started using scanning and reject at SMTP time.
>
> In fact today... just to see, I disabled SA-Exim. I've quadrupled the
> amount of bandwidth My COLO provider has seen my machine use.
[snip]
I must be missing something here. In order to scan an email you must
receive the email (I don't mean accept). How can rejecting/accepting
emails at this stage make any significant difference in bandwith used
(let alone a quadrupling of bandwidth)?
> I only
> have 1TB a month. I'll let it go for a few days (through the weekend
> when peaks are usually happening) to track overall usage.
"Only 1TB a month"! How much mail do you handle that can make an
impact on such a huge bandwidth allowance? Are you running an ISP? ;-)
I have 64GB/month for each of my two (virtual under Xen) servers and
I've never had to think about bandwidth used by mail even when I was
hosting several domains for friends/family.
--
David Hart <debian@tonix.org>
Reply to: