I've just moved some anti-virus/anti-spam checks a bit closer to the
source, and am now rejecting the following before it even gets to the
anti-virus checking, and/or majordomo:
/^Subject: Thank you!/ REJECT
/^Subject: Re: Thank you!/ REJECT
/^Subject: Re: Wicked screensaver/ REJECT
/^Subject: Wicked screensaver/ REJECT
/^Subject: Re: Re: My details/ REJECT
/^Subject: Re: That movie/ REJECT
/^Subject: That movie/ REJECT
/^Subject: Re: Approved/ REJECT
/^Subject: Approved/ REJECT
/^Subject: Re: Details/ REJECT
/^Subject: Re: Your application/ REJECT
/^Subject: Your application/ REJECT
/^Subject: Re: Your details/ REJECT
/^Subject: Your details/ REJECT
/^Subject: Details/ REJECT
Which seems to be the subject's that are rejected to the whole Sobig virus
... right now, there are ~2000 messages in Majordomo's queue to be
processed, probably about 90% with the above subjects, that is really
really slowing down delivery/processing of *legit* messages to the lists
... hopefully this will keep alot of the garbage out of the queues and get
the lists back on track ...
Just a situation report as to why things are looking soo slow ...
Right now, amavis has processed the following so far today:
neptune# awk '{print $7}' /var/log/amavisd | sort | uniq -c
305 BAD
171 BANNED
22554 INFECTED
8854 Passed,
hopefully adding the header_checks into postfix will keep the INFECTED
from growing much more *cross fingers*
Am keeping a close watch on things and will see how it fairs ...
