E-mail Technical E-mail Technical Coordinators MeetingCoordinators Meeting

Chris BongaartsChris Bongaarts

Steve SiirilaSteve Siirila

December 7, 2005

E-mail Server Load E-mail Server Load IssuesIssues Spike in worm and virus e-mail trafficSpike in worm and virus e-mail traffic Excessive Inbox hitsExcessive Inbox hits Excessive Inbox sizesExcessive Inbox sizes Increased SSL usageIncreased SSL usage Server capacity limitationsServer capacity limitations SAN I/O capacity limitationsSAN I/O capacity limitations Backups running into peak hoursBackups running into peak hours Auto-filing running into peak hoursAuto-filing running into peak hours

Messages Blocked By Reason (Past 12 Months)

0.0

0.5

1.0

1.5

2.0

2.5

3.0

3.5

4.0

Week Ending

Mill

ion

s o

f Mes

sag

es B

lock

ed

Spam source Dynamic Insecure Virus* DNS Bad mail from

Spam/Virus Blocking by Reason (Nov. 7- Dec. 4)

5,6780.03%1,260,897

7.49% 2,138,24012.71%

96,6560.57%

4,206,95025.00%

9,119,68654.19%

Spam

Dynamic

Insecure

Virus *

DNS

Bad mail from

Viruses Detected Feb 2004 - Dec 2005

0

50,000

100,000

150,000

200,000

250,000

300,000

350,000

400,000

450,0002/

9/20

04

3/9/

2004

4/9/

2004

5/9/

2004

6/9/

2004

7/9/

2004

8/9/

2004

9/9/

2004

10/9

/200

4

11/9

/200

4

12/9

/200

4

1/9/

2005

2/9/

2005

3/9/

2005

4/9/

2005

5/9/

2005

6/9/

2005

7/9/

2005

8/9/

2005

9/9/

2005

10/9

/200

5

11/9

/200

5

Week Ending

Vir

use

s D

etec

ted

Incoming Email Statistics (Past 12 Months)

0.0

2.0

4.0

6.0

8.0

10.0

12.0

Week Ending

Mill

ion

s o

f M

essa

ges

Blocked

Blocked local

Relay denied

Unknown user

User inactive

Pre-init user

Temporary error

Accepted

User allows allemailPermitted

perm local only

Incoming Email Statistics (Nov. 7 - Dec. 4)

Blocked29%

Other1%

Temporary error1%

Accepted27%

User allows all email1%

Unknown user41%

E-Mail Performance E-Mail Performance Statistics (Mon 11/28)Statistics (Mon 11/28) 62,781 active users62,781 active users 43 connects/user average43 connects/user average 10MB average size Inbox10MB average size Inbox 497MB average I/O per user497MB average I/O per user 31TB I/O total31TB I/O total Top 10 users transferred 1.5 TBTop 10 users transferred 1.5 TB

Possible E-mail Possible E-mail Performance Performance ImprovementsImprovements More aggressive auto-filingMore aggressive auto-filing Place more limits on frequency of Place more limits on frequency of

accessesaccesses IMAP/POP daemon tuningIMAP/POP daemon tuning Webmail application tuningWebmail application tuning System and/or SAN I/O tuningSystem and/or SAN I/O tuning Run backups earlier to avoid peak hoursRun backups earlier to avoid peak hours Migrate to new Inbox format (long-term)Migrate to new Inbox format (long-term) Investigate auto-expunge option for usersInvestigate auto-expunge option for users Additional hardware (coming)Additional hardware (coming)

Inbox Auto-FilingInbox Auto-Filing

23,536 eligible users notified23,536 eligible users notified 17,280 users auto-filed total (i.e. mailbox 17,280 users auto-filed total (i.e. mailbox

scanned, possibly filed)scanned, possibly filed) 1,603 users auto-filed on 12/51,603 users auto-filed on 12/5

– 1,175 mailboxes contained eligible messages1,175 mailboxes contained eligible messages– 37,032 (3GB) of 526,909 (77GB) messages 37,032 (3GB) of 526,909 (77GB) messages

filedfiled Percentage of message data auto-filed Percentage of message data auto-filed

down from 10% to 4%down from 10% to 4%

New Webmail OptionsNew Webmail Options

New Webmail available from New Webmail available from JAWSJAWS

One or more additional Webmail One or more additional Webmail applications being deployed soonapplications being deployed soon

Looking at non-PHP-based open-Looking at non-PHP-based open-source implementationssource implementations

Phase-out of clear-text Phase-out of clear-text passwordspasswords 791 users remain insecure791 users remain insecure

– 666 TC client/server (aquamarine)666 TC client/server (aquamarine)– 125 TC premium (garnet)125 TC premium (garnet)

Morris conversion is completeMorris conversion is complete

IMAP Usage Totals Year-to-Date

0

2000

4000

6000

8000

10000

12000

14000

16000

Week Ending

Nu

mb

er o

f U

sers

Non-SSL

SSL

POP Usage Totals Year-to-Date

0

2000

4000

6000

8000

10000

12000

14000

16000

18000

20000

Week Ending

Nu

mb

er o

f U

sers

Non-SSL

SSL

SMTP Gateway Usage Year-to-Date

0

5,000

10,000

15,000

20,000

Week Ending

Nu

mb

er o

f U

sers

Non-Auth

Auth

Top 10 Top 10 Unauthenticated SMTP Unauthenticated SMTP gateway IPsgateway IPs mail.nursing.umn.edumail.nursing.umn.edu fever.cidrap.umn.edufever.cidrap.umn.edu ahcweb05.ahc.umn.eduahcweb05.ahc.umn.edu wwws3.csom.umn.eduwwws3.csom.umn.edu ucs.micro.umn.eduucs.micro.umn.edu omwl-b4-bp.lib.umn.eduomwl-b4-bp.lib.umn.edu rudi2.reshalls.umn.edurudi2.reshalls.umn.edu wwws1.csom.umn.eduwwws1.csom.umn.edu omaweb.stu.umn.eduomaweb.stu.umn.edu x94-206-167.law.umn.edux94-206-167.law.umn.edu

Bits ‘N BytesBits ‘N Bytes

Must move equipment out of Must move equipment out of CHRCCHRC

User-maintained User-maintained whitelist/blacklist enhancements whitelist/blacklist enhancements coming sooncoming soon

Block list reports now mailed at Block list reports now mailed at correct time (after 6am)correct time (after 6am)

‘‘Till next month…Till next month…

Steve SiirilaSteve Siirila sfs@umn.edusfs@umn.edu 612-626-0244612-626-0244

Chris BongaartsChris Bongaarts cab@umn.educab@umn.edu 612-625-1809612-625-1809