I have used procmail or some time now on various systems for different
kinds of filtering. But i think i have a special situation now that i
hope procmail can help me with. I work for a university and we
currently run a sendmail gateway server that does virus and spam
filtering. Right now it is maxed out on sendmail connections (200) as
a result of the latest greatest worm.
I will try to explain our setup to see if procmail can help or not.
The sendmail server is just a gateway email server. It runs the
commercial version of sendmail and trend micro's interscan email
viruswall. It is also running a spam proxy daemon that passes emails
from sendmail to spamassassin then back to sendmail. The reason i need
help with procmail is because there is no local delivery at all. After
the scanning for viruses and spam happens all email is then forwarded
to our internal exchange servers.
Right now the connection limit is stayng full from people trying to
send the virus inbound, which takes up connections, and also bounces
being sent back to spoofed addresses at our domain. What i would like
to do is somehow drop all these emails if detected, hoping to make
sendmail process a bit quicker. Does anyone think this would work? The
more i think about it, the connections are still being made to the
sendmail server. Right now our emails are being delayed by 14 hours. I
am not the email admin but work very closely with him, and he tells me
thats because our primary email server is busy so emails coming in
fail over to the secondary email box.. which if its busy.. the
incoming request just waits to keep trying to send to the secondary
and doesnt try to resend to the primary first.
So back to the subject, does anyone think procmail can help us at all?
--
Richard Witt
Monticello Technologies "Technology that Works"
http://monticello.biz
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail