September 2003 - Test - lists.nanog.org

Re: BMITU
by Robert Boyle 04 Sep '03

04 Sep '03

At 02:35 PM 9/4/2003, Brad Knowles wrote: and most *nix platforms, look at Surgemail from http://www.netwinsite.com >> It is incredibly scalable and VERY fast. > > Got any benchmarks? We have tested all of them. We process several million messages per day for tellurian.com. The only server which doesn't die immediately or within 30-60 minutes is Surgemail. All others are crippled by multi-threaded and multi-homed dictionary attacks very quickly. I am speaking only of Win32 servers. That is what he asked for. >> It uses a spam assassin-like >> filter which is written in C so it is at least 20-100 times faster than >> spam assassin and 95% as effective. > > Again, benchmarks, please. Spam assassin could not handle the load and choked on the mail volume. We were only able to process 1-2 messages per second with spam assassin. (not running spamc/spamd since it doesn't work on Win32) We can now peak at 50-100 messages per second without any problem. The ruleset is completely customizable and it includes a distributed razor-like checksuming spamtrap database. Even without Bayes capability, with thousands of messages per day, I only receive one or two false positves or false negatives per week. > In particular, I'd also like to see effectiveness benchmarks, > such as the ones recently reported at > <http://freshmeat.net/articles/view/964/>. Here, SpamAssassin won as a > non-learning filter, but it also has a Bayesian/learning mode that would > allow it to perform as well as or better than any of the other learning > types. Of course, they tested version 2.55 and 2.60 is already > available, so that would also make a difference. Unfortunately, spam assassin is so effective and popular that spammers are using the rules to game SA now. We use a different ruleset than SA so we are less susceptible to forced false negatives. >> It includes support for AVAST >> anti-virus > > Any other anti-virus solutions supported? AMaViS and amavisd-new > support something like thirty different plug-in modules that you can use. Sure. You can use any command line scanner. Norton, McAfee, RAV, whatever... We were using RAV until a week ago when we decided to switch to AVAST. >> and the webmail program is powerful, fast, and includes >> support for PGP. > > Webmail is another aspect of the overall system. Myself, I've > found that many webmail systems are too dependant on support for > javascript in the browser. In particular, IMP/horde has a problem in > this area. We found that TWIG was the best webmail application we could > find, although I've also heard good things about SquirrelMail. There are > many others also listed at > <http://directory.google.com/Top/Computers/Software/Internet/Clients/Mail/We…>. It is a standard IMAP/POP/SMTP server so you can use any webmail you want. The one which is included is very fast and powerful. It includes almost any feature a full featured email client should have. View source, view headers, PGP, redirect, rules, anti-spam rules and exceptions. >> It is an AWESOME product and the support and >> developers are top notch too. I don't have any vested interest in >> the company, but I am a very happy customer. (They also make DNews >> which many people here are probably familiar with) > > DNews I am familiar with. Not bad for what it is, but Diablo is > much more scalable. It's also more difficult to manage, but the best-run > large news providers in the world that I know of are all using Diablo. Many also use Cyclone and Typhoon too. I didn't say that DNews was the most scalable server, but that people would know the company by it. :) I haven't wasted my time or bandwidth running a news server for many years so I can't comment on news server scalability. -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

1 0

ethernet-based temperature sensors
by matthew zeier 04 Sep '03

04 Sep '03

I know this has been mentioned before, but other than NetBotz (too pricey), what are people use as ethernet-based, SNMP-probable temp sensors? I very simply need to trend temp with cricket/mrtg in various parts of the data center. Looking for real-world experience. Thanks. -- matthew zeier - "Curiosity is a willing, a proud, an eager confession of ignorance." - Leonard Rubenstein

8 7

RR
by /m 04 Sep '03

04 Sep '03

Can someone from roadrunner get ahold of me off-list. /micah

1 0

Address for making BGP changes w/ Qwest?
by Temkin, David 04 Sep '03

04 Sep '03

bgp-admin(a)qwestip.net doesn't work anymore. Is there anyone from Qwest on the list or can someone point me to where I'm supposed to be making these changes now? (Call tech support?!) Thanks, Dave

3 2

RE: BMITU
by Fisher, Shawn 04 Sep '03

04 Sep '03

>that nothing can equal, much less beat, sendmail. This is especially >true when you start talking about filtering for spam or viruses via >the milter interface. What are people using for network based anti-virus? A friend of mine started a company www.raeinterent.com/rav and claims to have an industrial anti-virus app that plugs into Communigate Pro. Any experience with network based anti-virus & mail systems? Thx

2 1

RE: BMITU
by Austad, Jay 04 Sep '03

04 Sep '03

I second the vote for Postfix. I haven't used it with a ton of users, but I built a large mail cluster for my old employer which was used to send stock pricing alerts to users that have set up thresholds for certain stocks. Initially, the cluster was qmail (that was back in 2000). I used qmail because it's performance was better than anything else I tested, including postfix. Qmail is a pain to administer, especially when you have a bunch of them. After getting fed up with qmail, I tested Postfix again, and the newer versions of it outperformed qmail by a longshot, and I could spawn many more connections with it without running out of file descriptors. Adding features to qmail sucks because it's always a patch, and it's usually something that most other mailservers already have built in. When you install it and have 10 patches that you need to apply, you need to apply them in the right order so they don't step on each other. There are some limits in qmail that you need to patch for in order to make it work in a very large environment, like the big-concurrency patch and the patch to increase the size of the queue. Administration of postfix can all be done with the postconf command, you don't have to edit config files at all. This makes it great for clusters because I had a script I wrote that would execute a command across all of the machines in the cluster. So a config change for every machine involved typing: grun 'postconf -e whatever = something' grun 'postfix reload' I've heard some good things about exim, but in my testing, I was unable to get the performance I could get with postfix. Maybe it was my fault, I didn't spend that much time with Exim because the ease of administration with Postfix was vastly better than any other mailserver I've used. Postfix rocks. Apple just ripped sendmail out of OS X and replaced it with Postfix if that says anything. -jay > -----Original Message----- > From: Jack Bates [mailto:jbates@brightok.net] > Sent: Thursday, September 04, 2003 10:32 AM > To: Fisher, Shawn > Cc: Nanog List (E-mail) > Subject: Re: BMITU > > > > Fisher, Shawn wrote: > > > I would like to get some opinions on the Best Mailserver in > the Universe. > > Is there a more appropriate list for this question? > > I'm partial to sendmail due to the grandfather clause, but if > I could go > back in time and redesign everything, I'd be a diehard postfix fan. I > have seen postfix and sendmail used in mail servers handling over 30 > Million accounts. Good enough for ya? > > -Jack > >

1 0

RE: ethernet-based temperature sensors
by Neil Ronketti 04 Sep '03

04 Sep '03

> From: Bill Owens [mailto:owens@nysernet.org] > > I suppose if one had enough time and interest, and some Java skills, > you could make something out of these: > > http://www.ibutton.com/ibuttons/thermochron.html > http://www.ibutton.com/TINI/applications/sertoeth/ </lurk> If you don't want to use the little iButton holder jobbie, you can use just the DS1820 range of sensors from Dallas Semiconductor. I bodged up something using one of these and a DS9097U RS-232 adaptor: http://www.neil.nu/temp.html I realise this is probably only of peripheral interest, as the original post requested a unit with SNMP capability, and the DS1820 doesn't provide anything as sophisticated. It was, however, completely free of charge as I got the bits as samples from Farnell in the UK. The software to drive the units is freely available, and it should be pretty trivial to get it to mail a pager or whatever if the temperature goes outside of limits. First post - please be gentle. -- Neil Ronketti MCI, Internet House, IP Design Engineer, CNE 332 Science Park, Cambridge CB4 0BZ Tel: +44 1223 382175 http://www.uk.uu.net/ VNET: 311 3175 http://www.mci.com/

1 0

Atlanta Internet exchange
by Michael Lucking 04 Sep '03

04 Sep '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Recently I have worked with several ISPs to build a new Internet exchange in Atlanta, GA. The AtlantaIX is now operational and accepting connections. We are located in 56 Marietta St. If you have a presence in the building and would like to connect drop me a line. The building owners are one of the sponsors and have given space and power for the exchange. For more information check http://www.atlantaix.com. -----BEGIN PGP SIGNATURE----- iD8DBQE/V2PqYCZjVDyC1X4RAuCaAKC83dg9fhUa++BE4Xi+IOTI1fX9twCfcqNx Zeqo3gDjV8A5th6Zp4fWJpQ= =GhCJ -----END PGP SIGNATURE-----

1 0

RE: BMITU
by Fisher, Shawn 04 Sep '03

04 Sep '03

>You didn't specify operating system but for 500,000 users I wouldn't >even go near Windows. thanks for the feedback..we are a SUN shop so solarius is our OS of choice. >I use a healthy mix of Postfix as the mail server >and Courier-IMAP for POP3/IMAP delivery. They both work extremely well. Chris -- Chris Horry "Don't submit to stupid rules, zerbey(a)wibble.co.uk Be yourself and not a fool. PGP: DSA/2B4C654E Don't accept average habits, Amateur Radio: KG4TSM Open your heart and push the limits."

1 0

Distributed sniffer products
by Austad, Jay 04 Sep '03

04 Sep '03

Anyone have any experience with these? I'm looking for something similar to Network Associates Sniffer product. Are there any open source projects that are decent? What are others using? ---------------- Jay Austad Senior Network Analyst Travelers Express / MoneyGram e: jaustad(a)temgweb.com p: 952.591.3779

10 15