On Tue, Jun 24, 2008 at 09:01:05AM +1000, Christian Purnomo wrote: > Subject: Re: [AMaViS-user] Amavis bottleneck? > Date: Mon, Jun 23, 2008 at 10:51:28AM -0700 > Quoting MrC ([EMAIL PROTECTED]): > > : Are your queues filled with bounce messages because you are accepting > : mail to unknown recipients? Are you rejecting unknown recipients at the > : first postfix instance. > > HI MrC > > Yes, more than 50% of the emails in the queue are Non-delivery type > email. This mail server is one of our mail gateway which primary job is > to relay email to our Exchange server, hence the server simply receives > all the incoming emails and relay through to our internal exchange > server.
Not a good idea. > Our postfix has the following configuration: > > smtpd_recipient_restrictions = > reject_unauth_pipelining, > permit_mynetworks, > reject_unknown_recipient_domain, > check_recipient_access hash:/etc/postfix/recipient_access, > reject_unauth_destination, > permit_auth_destination You will greatly ease your load, and avoid belaboring other Internet domains with bounces, if you enhance your Postfix configuration to reject known non-deliverable addresses. There are two basic approaches to doing this with Exchange: 1) install an LDAP client on your Postfix server, and configure LDAP to validate users against the Active Directory, as Exchange is probably doing. See <http://www.postfix.org/LDAP_README.html> <http://readlist.com/lists/postfix.org/postfix-users/7/36237.html> for a quick overview. 2) use the Postfix recipient verification hooks to verify recipients directly against the Exchange server before accepting them. See <http://www.postfix.org/ADDRESS_VERIFICATION_README.html#recipient> for an introduction. Consult the postfix-users list if you need more help with either approach. This still doesn't explain why your amavisd is running slow, but it will cut your incoming load and queue size at least in half, make you a less attractive target to spammers, and make your site a better Netizen. Big win. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
