store | blogs | forums | twitter | facebook | wiki | mailing lists | downloads | support portal
Atomic Secure Linux
It is currently Tue May 21, 2013 4:44 am

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic Share/Bookmark  [ 25 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Tue Nov 30, 2010 3:46 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin

Joined: Wed Dec 31, 1969 8:00 pm
Posts: 7420
Location: earth
I wonder if we ever put the troubleshooting methodology up from the book here.

Debugging procedure for services/users/daemons writing to files, cant write to something... you make the directory its trying to write to world writable and then wait until mystery-service writes something to the directory. Whatever user it creates the file as will tell you what the file needs to be owned by. Then chown -R mysteryuser <path/fill/in/the/blank>. PS- dont forget to set your permissions back.


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Tue Nov 30, 2010 4:17 pm 
Offline
Forum Regular
Forum Regular

Joined: Sat Mar 28, 2009 6:58 pm
Posts: 802
Location: Germany
Quote:
I really want to keep the psa version because it lets our clients manage their own spam issue's and training but i also like having qmail-scanner also.

Have you ever made a survey of how many of your customers really use Plesk spamassassin configuration and training methods via the GUI?
I would consider it. The survey I did answered my question pretty good.

0% (zero!) used the features.
90% did not even know about it altough they got a good introduction and a step-by-step-for-the-dumbest-assumable-user-tutorial-pdf
100% don't wanted to take the time using it.

So you see. It's not all about features. Similar to a Porsche GTS in a blind mans garage :mrgreen:


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Tue Dec 07, 2010 7:10 am 
Offline
Forum Regular
Forum Regular

Joined: Mon Apr 14, 2008 8:29 am
Posts: 278
Location: Rhode Island
I just wanted to thank everyone for their input, i went the route of removing psa-spamassassin, spamassassin and qmail scanner then did a re-install of just art spamassasin and qmail-scanner only. Now for tweaking the setup is it just adjusting the /etc/qmail-scanner.ini and /etc/mail/spamassassin/local.cf files only or is there more to it than that. And if anyone has some tips or setting examples i would love to see what others use.

Thanks to all in advance.


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Fri Mar 16, 2012 2:25 pm 
Offline
Forum Regular
Forum Regular

Joined: Wed Aug 04, 2010 2:52 pm
Posts: 256
I can relate to the OP's frustration. qmail-scanner + clamd + spamassassin is simply to heavy to run in a shared hosting environment. If I understand correctly, ASL recommends running email on a separate server from web services for this reason. The biggest frustration for me is that clamd + spamassassin are called for every *outgoing* email, from email lists and whatnot, and this is simply a huge resource hog. From what I understand, you can't turn off AV/SA checking for outgoing without turning it off for incoming, so the solution is to remove qmail-scanner. Following the docs on simply removing clamd_scanner and spamassassin from the qmail-scanner-queue.pl and reconfiguring simply don't get the job done. QS still insists on hogging resources.

Anyway, I was luckier than the OP, when I did the plesk "switch to postfix then switch back to qmail" it finally all started working again. Reinstalling the psa-qmail RPM did *not* fix it after uninstalling qmail-scanner, as QS's hooks were still in there somehow.

When I've rolled qmail installs manually, there was always some form of tcprules or invocation file that specified which queue you were running through. I looked for this with the psa-qmail rpm and couldn't find it, so I couldn't manually disable QS.

Lots of frustration with QS, I'd say you should know that you *need* it before you go down that path, and plan on having dedicated resources to your mail stack.


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Sat Mar 17, 2012 9:09 am 
Offline
Forum Regular
Forum Regular

Joined: Sun Mar 29, 2009 6:52 pm
Posts: 348
A few months ago I did a reinstall. Neved installed qmail scanner again... The fact that you actually can't remove it is really bad...

_________________
Hello IT.
Phone : Blah Blah ....
Have you tried turning it on and off again ?
Phone : Blah Blah ....
....
I'm sorry, are you from the Past ?!
http://www.youtube.com/watch?v=-E4fm4Wqego


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Sun Mar 18, 2012 7:13 pm 
Offline
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
User avatar

Joined: Thu Feb 07, 2008 7:49 pm
Posts: 3243
Location: Chantilly, VA
Quote:
If I understand correctly, ASL recommends running email on a separate server from web services for this reason.


Definitely. All of the antivirus and antispam products out there are pretty CPU heavy. But theres an even better reason to do this: email can be slow it doesnt need to be "real time". What I mean by this is that email, unlike any other service on the system (web, ssh, FTP, etc.) can be slow. Users will tolerate an email taking a few seconds to be delivered, but they won't in my experience tolerate a web site taking several seconds to load. Nor will they tolerate SSH taking several seconds to reply to a key stroke, mysql taking several seconds to respond, and so on.

But they will tolerate email taking a few seconds. So, the best bang for your buck is to set up a dedicated box (doesnt even have to be big or fast) to offload and handle all incoming email and scan it for spam and viruses. That way, the only system that ever gets slow is one the users never "see". Its not hosting anything, so to them everything stays nice and fast. Plus, if you get a big surge of email, your websites (and your customers) won't be upset that their sites are now suddenly slow. Email might take a few more seconds to get to them, but since most users are tolerant of (and even expect) email to take a few seconds to get to them they never notice. A cheap server is all your need to do this, and the project gamera packages are purpose built to do this.

We even have big commercial customers, and government agencies that use Project Gamera for all their spam and virus scanning needs.

_________________
Michael Shinn
Atomicorp - Security For Everyone

Co-Author of Troubleshooting Linux Firewalls.


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Mon Mar 19, 2012 6:50 am 
Offline
Forum Regular
Forum Regular

Joined: Sun Mar 29, 2009 6:52 pm
Posts: 348
I thought this was still beta ! Is there anywhere documentation where we can read and understand how PG works ?



mikeshinn wrote:
Quote:
If I understand correctly, ASL recommends running email on a separate server from web services for this reason.


Definitely. All of the antivirus and antispam products out there are pretty CPU heavy. But theres an even better reason to do this: email can be slow it doesnt need to be "real time". What I mean by this is that email, unlike any other service on the system (web, ssh, FTP, etc.) can be slow. Users will tolerate an email taking a few seconds to be delivered, but they won't in my experience tolerate a web site taking several seconds to load. Nor will they tolerate SSH taking several seconds to reply to a key stroke, mysql taking several seconds to respond, and so on.

But they will tolerate email taking a few seconds. So, the best bang for your buck is to set up a dedicated box (doesnt even have to be big or fast) to offload and handle all incoming email and scan it for spam and viruses. That way, the only system that ever gets slow is one the users never "see". Its not hosting anything, so to them everything stays nice and fast. Plus, if you get a big surge of email, your websites (and your customers) won't be upset that their sites are now suddenly slow. Email might take a few more seconds to get to them, but since most users are tolerant of (and even expect) email to take a few seconds to get to them they never notice. A cheap server is all your need to do this, and the project gamera packages are purpose built to do this.

We even have big commercial customers, and government agencies that use Project Gamera for all their spam and virus scanning needs.

_________________
Hello IT.
Phone : Blah Blah ....
Have you tried turning it on and off again ?
Phone : Blah Blah ....
....
I'm sorry, are you from the Past ?!
http://www.youtube.com/watch?v=-E4fm4Wqego


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Mon Mar 19, 2012 10:15 am 
Offline
Long Time Forum Regular
Long Time Forum Regular

Joined: Sat Aug 20, 2005 9:30 am
Posts: 2812
Location: The Netherlands
http://www.atomicorp.com/wiki/index.php/Project_Gamera has some information. There used to be more on the old atomicrocketturtle.com Joomla site (e.g. http://www.atomicrocketturtle.com/Jooml ... iew/77/29/ ), but the content seems to have disappeared from those pages.

_________________
Lemonbit Internet Dedicated Server Management


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Mon Mar 19, 2012 11:48 am 
Offline
Forum Regular
Forum Regular

Joined: Sun Mar 29, 2009 6:52 pm
Posts: 348
breun wrote:
http://www.atomicorp.com/wiki/index.php/Project_Gamera has some information. There used to be more on the old atomicrocketturtle.com Joomla site (e.g. http://www.atomicrocketturtle.com/Jooml ... iew/77/29/ ), but the content seems to have disappeared from those pages.


I saw the first link but information are not adequate...

_________________
Hello IT.
Phone : Blah Blah ....
Have you tried turning it on and off again ?
Phone : Blah Blah ....
....
I'm sorry, are you from the Past ?!
http://www.youtube.com/watch?v=-E4fm4Wqego


Top
 Profile  
 
 Post subject: Re: before using the qmail-scanner ?
Unread postPosted: Wed Mar 21, 2012 3:20 pm 
Offline
Forum Regular
Forum Regular

Joined: Wed Aug 04, 2010 2:52 pm
Posts: 256
This server that I've been having on-and-off crashing battles with for months... now that qmail-scanner is off of it, life has gotten much better. I offloaded most email services elsewhere, and just use this for outgoing email lists that are tied in directly to the website software.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic Share/Bookmark  [ 25 posts ]  Go to page Previous  1, 2

» Feed - Atomicorp

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group