Henrik wrote:

> You really should use something like policyd-weight, and greylisting (only
> for "dialup" like addresses, I hate to delay mail for normal servers). That
> immediately reduces your load significantly..

> Cheers,
> Henrik

I also use and recommend policyd-weight. I set $REJECTLEVEL = 4.24;
which is fairly conservative, but policyd-weight still rejects 75% of
the mail that ends up getting rejected, with an overall rejection rate
that varies between 65% and 85%. I have a secondary MX (not
round-robin) in place that acts primarily as a spam rejection point.
I run policyd-weight, postgrey, and a couple RBLs on that machine, and get
a 98% rejection rate. I only greylist for 50 seconds. The few messages
that make it through get hit by amavisd-new using FuzzyOCR, ImageInfo,
p0f, and the latest SA rules via sa-update. Having this secondary MX in
place lessens the load on the primary MX by 40%. And yes, if my
primary MX is down, legitimate mail will still make it through the
secondary - but I like to be considerably more conservative on the
primary.

Gary V


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to