Print Page | Close Window

Memory Leak and DNSRBL

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=2145
Printed Date: 23 February 2025 at 1:02am


Topic: Memory Leak and DNSRBL
Posted By: Guests
Subject: Memory Leak and DNSRBL
Date Posted: 07 October 2003 at 6:54am

Hi Everyone... Two little questions...

1. I have installed the newest version (registered one), with MySQL.... it seems

that there is a hugh memory leak.... each 2 days, my virtual memory goes into very

low mode... and system crash... when checking in task manager, SpamFilter

service is takin around 1GB of VM.... anyideas?

(everything works, but it consume lots of memory)

2. Somehow i have the feeling that the dnsrbl is not working correctly....

i get lots of spams into our mailing box, I am using 2 min. Maps,

since from my past expirience, 1 reject also good mails...

i am using the following dnsrbls:

bl.spamcop.net, true
sbl.spamhaus.org, true
spam.dnsrbl.net, true
dnsbl.njabl.org, true

And last one... (I know i said i have only too...), any one have any bad keyword list

to donate ?, mine is not so updated...

 

 

Thanks,

Eran.




Replies:
Posted By: Desperado
Date Posted: 07 October 2003 at 7:47am

Eran,

On the first issue, Try setting the "Hide List" setting in the Quarantine section of the SpamFilter settings.  If you have a large Quarantine DB, diaplaying the list uses a LOT of memory.

Second issue:  I use a setting of "1" for min Maps with the following servers and do not get what I feel are false positives.:

site1=blackholes.easynet.nl, true
site2=dnsbl.njabl.org, true
site3=dnsbl.mags.net, true  (This on is our own dnsbl list so do not use it.)

On the third issue,  I have a very shor but agressive keywork list that I use.  I will warn you that it blocks several valid "List Servers" so I have to add those servers to my "Excluded From Emails" list.  I also have to add a couple of words to my "Keyword Whitelist".  See below:

KEYWORD BLACK LIST:

((<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--](.+)){2,})
((http|3dhttp)://.{0,26}(((%.+%))|@|:)[(\d|\w)])
( http://+[\d]{1,3}\.{1}[\d]{1,3}\.{1}[\d]{1,3}\.{1}[\d]{1,3" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+ [\d]{1,3}\.{1}[\d]{1,3}\.{1}[\d]{1,3}\.{1}[\d]{1,3})
(( http://http:/" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://http:/ \w)|(<(\w){3,10}(\x20/>)|(\* http://w" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://w )))
(<[!--]+[a-zA-Z0-9]{2,3}(-\->))
(((natural penis)|(arge your p)|(1-4 inches)|(3 - 5 inches\!)|(generic viagra)|(123respmarket)|(herbalpillsonline)|(herbaltrials\.com)|(naturalherbal)|(pillsavings)|(gsc\-100)|(go771world)))
((text\-decoration: blink)|(click here to start)|(limited time (special|offer))|(your privacy is extremely important to us)|(this is not spam))
(((www\.)|( http://))(\w){1,20}(4u)\.(biz|com|net)|(medsonsale\.biz)|(freeandgetsave)|(opportunit12)|(thirdw\.com)|(teflondoninc)|(epromotionad" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http:// ))(\w){1,20}(4u)\.(biz|com|net)|(medsonsale\.biz)|(freeandgetsave)|(opportunit12)|(thirdw\.com)|(teflondoninc)|(epromotionad))
((lsgone\.php)|(isgone\.php)|(exit\.asp)|(mc4\.idetermination)|(medsusa\.biz)|(getitwhileucan)|(\&\#105)|(4improvement\.biz)|(best\-ratez\.biz)|(genoveseinc\.biz)|(greatestoffersite\.biz)|(gootle\.us))
((remove\.php)|(hit\.php)|(re\-move))

EXCLUDED FROM EMAIL:

mailto:*@listproc.pcworld.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@listproc.pcworld.com
mailto:*@industryweek.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@industryweek.com
mailto:*@gpsadvantage.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@gpsadvantage.com
mailto:*@gwbakeries.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@gwbakeries.com
mailto:*@peoples.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@peoples.com
mailto:*@*.lga2.nytimes.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@*.lga2.nytimes.com
mailto:*@*.*.nytimes.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@*.*.nytimes.com
mailto:*@softshare.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@softshare.com
mailto:*@regulusgroup.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@regulusgroup.com
mailto:*@e-news.fsonline.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@e-news.fsonline.com
mailto:*@lists.n-email.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@lists.n-email.net
mailto:*@lists.techtarget.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@lists.techtarget.com
mailto:*@lyris.stockupticks.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@lyris.stockupticks.com
mailto:*@multexinvestornetwork.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@multexinvestornetwork.com
mailto:*@newsletter.online.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@newsletter.online.com
mailto:*@insightmedia.info" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@insightmedia.info
mailto:*@nhfairfield.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@nhfairfield.com
mailto:*@newhorizons.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@newhorizons.com
mailto:*@rootsweb.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@rootsweb.com
mailto:*@*.rootsweb.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@*.rootsweb.com
mailto:*@returns.groups.yahoo.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@returns.groups.yahoo.com
mailto:*@cygnuspub.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@cygnuspub.com
mailto:*@*.classmates.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@*.classmates.com
mailto:*@listserv.usairways.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@listserv.usairways.com
mailto:*@jkp.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@jkp.com
mailto:*@laurin.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *@laurin.com
mailto:*.*@dell.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - *.*@dell.com

KEYWORD WHITE LIST:

https://www.paypal.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - https://www.paypal.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - https://www.paypal.com
* http://hotjobs.yahoo.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://hotjobs.yahoo.com

I hope this helps.

Regards,

Dan S



Posted By: Guests
Date Posted: 07 October 2003 at 12:16pm

I always user the Hide button, since i know it consume lots of memory... but still..

The memory leak still exist, whatever i tried to do, nothing helps...

I turned off the logging, or every other option releated to memory consuming...

 

still no clue...

Thanks for the other info...

 

Eran.

 



Posted By: Sean
Date Posted: 07 October 2003 at 12:38pm

Check ensure you are actually running MDAC 2.7, and it has not been corrupted? SpamFilter users (Including myself) have found using the MDAC Component Checker that their install of MDAC had been down-revved by other applications (our culprit was Crystal Reports). Reinstalling MDAC 2.7, or higher should fix all leak issues (we are using MDAC 2.8 with no problems). This seems to apply to users who are using MySQL for the quarentine database.



Posted By: Guests
Date Posted: 07 October 2003 at 3:32pm

Thanks for the tip.. it seems that the MDAC reinstalltion (and upgrade to version 2.8)

solved the problem...

But i think its not related to MySQL since it uses MyODBC to connect it...

 

now... anyone else with ultimate bad keywords string ? ;-)

 

Thanks,

Eran.



Posted By: Guests
Date Posted: 07 October 2003 at 3:39pm

Dan,

Is it possible to get it by e-mail (text file) from you, i want to be sure

no HTML encoding, or any character was ommited...

 

My e-mail is mailto:ezeitoun@dalet.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - ezeitoun@dalet.com (now for sure i will got som spam! 8-) )

Also, can you explain me why do you hold your own dnsrbl server?

 

Thanks,

Eran.




Print Page | Close Window