Hi All,
We're using policyd for sasl sender throttling. It's working great and
helps give us a good break down of monthly usage etc
Occasionally we get the odd user who gets rejected with quota exceeded even
though they're either;
a) way below the quotas
b) sometimes have 0 set for quota (none)
I've attached a debug=2 output for the specific email that was rejected.
(The one thing I notice that's strange is that we're throttling by
sasl_username, the last function in the debug output is updating
_abuse_cur=1 where _from=(ENVELOPE SENDER),
When infact _from == the sasl_username (astraseal) (we've added a column
called _passwd and are authenticating against this).
Can anyone shed some light on this? Or perhaps give me a bump at where i
should be looking
Many thanks
Jon Duggan
Nuco Technologies Ltd
[EMAIL PROTECTED]
Tel. 0870 165 1300
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][0]:request=smtpd_access_policy
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][1]:protocol_state=end-of-message
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][2]:protocol_name=esmtp
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][3]:client_address=89.145.201.24
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][4]:client_name=89-145-201-24.xdsl.murphx.net
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][5]:reverse_client_name=89-145-201-24.xdsl.murphx.net
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][6]:helo_name=astraseal.com
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 policy_array[10][7]:[EMAIL
PROTECTED]
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 policy_array[10][8]:[EMAIL
PROTECTED]
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][9]:recipient_count=1
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][10]:queue_id=10e71b802d
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][11]:instance=ab17.470cbf67.10bf1.0
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 policy_array[10][12]:size=179360
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 policy_array[10][13]:etrn_domain=
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][14]:sasl_method=login
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10
policy_array[10][15]:sasl_username=astraseal
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 policy_array[10][16]:sasl_sender=
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 policy_array[10][17]: =
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][0]:
89-145-201-24.xdsl.murphx.net
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][2]: 89.145.201.24
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][3]: 89.145.201.%
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][4]: 89.145.%.%
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][5]: 89.%.%.%
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][6]: pauld
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][7]: astraseal.com
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][8]: james.round
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 host_array[10][9]: sky.com
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][0]: 89.145.201
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][1]: [EMAIL
PROTECTED]
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][2]: [EMAIL
PROTECTED]
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][3]: 179360
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][4]: astraseal
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][5]: astraseal.com
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 triplet_array[10][6]:
ab17.470cbf67.10bf1.0
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 checking throttle
Oct 10 13:02:51 smtp policyd: DEBUG: fd: 10 db_charquery(): SELECT
_from,_count_max,_count_cur,_date,_quota_cur,_quota_max,
_time_limit,_mail_size,_count_tot,_rcpt_max,_rcpt_cur,_rcpt_tot, _log_warn,
_log_panic, _abuse_tot FROM throttle WHERE _from='astraseal'
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 0 data: astraseal (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 0 data: astraseal (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 1 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 1 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 2 data: 512 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 2 data: 512 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 3 data: 1191574881 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 3 data: 1191574881 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 4 data: 40570122 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 4 data: 40570122 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 5 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 5 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 6 data: 2764800 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 6 data: 2764800 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 7 data: 20971520 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 7 data: 20971520 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 8 data: 512 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 8 data: 512 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 9 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 9 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 10 data: 512 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 10 data: 512 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 11 data: 512 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 11 data: 512 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 12 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 12 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 13 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 13 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 14 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 14 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10, db_optquery(): SELECT
COUNT(_instance) from throttle_from_instance WHERE
_instance='ab17.470cbf67.10bf1.0'
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 0 data: 0 (recieved)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 row: 0 data: 0 (extracted)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 db_doquery(): INSERT DELAYED INTO
throttle_from_instance (_instance,_expire) VALUES
('ab17.470cbf67.10bf1.0',1192017771)
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 checking throttle-sasl
Oct 10 13:02:52 smtp policyd: rcpt=5, throttle=abuse(f), host=89.145.201.24,
[EMAIL PROTECTED], [EMAIL PROTECTED], size=179360/20971520,
quota=40570122/250000000, count=512/512(512), rcpt=512/3600(512),
threshold=16|100|14, sasl_username=astraseal
Oct 10 13:02:52 smtp policyd: DEBUG: fd: 10 db_doquery(): UPDATE throttle SET
_abuse_cur=1 WHERE _from='[EMAIL PROTECTED]'
Oct 10 13:02:52 smtp postfix/smtpd[43799]: 10E71B802D: reject: END-OF-MESSAGE
from 89-145-201-24.xdsl.murphx.net[89.145.201.24]: 554 5.7.1 <END-OF-MESSAGE>:
End-of-data rejected: Policy Rejection- Quota Exceeded.; from=<[EMAIL
PROTECTED]> to=<[EMAIL PROTECTED]> proto=ESMTP helo=<astraseal.com>
Oct 10 13:02:52 smtp postfix/smtpd[43799]: disconnect from
89-145-201-24.xdsl.murphx.net[89.145.201.24]
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users
