Hello,

Friday, February 22, 2008, 4:49:31 PM, you wrote:
> Dietmar,
> SENDERQUOTALIMIT=2100000000 is what I use, and it is defined to be in 
> bytes.  It can't exceed
> what can be stored in a signed, long integer (or around 2.1 x 10^9).  I
> would say your setting of around 200 MB is certainly reasonable.  Since
> I don't really want to be bothered with this limit, I chose essentially
> the maximum possible value, and throttle rather on the number of 
> messages and the number of recipients.

Ok, so if it's in bytes, the description in policyd.conf is wrong,
unfortunately. Thank you for clearifying.

> What's your SMTP server's setting 00 if any -- on the maximum size of 
> any email message? In postfix, it's defined in the main.cf file in the
> variable "message_size_limit". It makes sense to match that with the 
> policyd setting, "SENDERMSGSIZE."  Is it possible that it's being 
> rejected by the SMTP server anyway, because the message size is already
> too big?  If you tink some emails are getting through, based on the 
> policyd and mail logs, you should be able to find evidence of some that
> did get delivered, and hence be able to check what the real size of the
> message was.  If not, then none of them probably ever really got delivered.

No. We have Postfix message_size_limit of 15MB and to not bother
that, I set SENDERMSGSIZE to 20MB (20480000).

What I am really wondering are the things shown in this two lines of
log occuring directly one after another:

2008-02-21 13:01:44 smtp2 local1.info policyd policyd[28701]: [ID
739646 local1.info] rcpt=172608, throttle=update(a),
host=x.x.x.x, from=<>, [EMAIL PROTECTED],
size=8876/20480000, quota=3007356/200000000, count=57/1000(57),
rcpt=58/1000(58), threshold=1|5|5

2008-02-21 13:02:29 smtp2 local1.info policyd policyd[28701]: [ID
739646 local1.info] rcpt=172737, throttle=update(p),
host=x.x.x.x, from=xxx,
toxxx, size=7740337/20480000,
quota=498390976/200000000, count=59/1000(59), rcpt=123/1000(123),
threshold=245|5|12

As you can see, without any mail between those 2 entries coming from
the same IP running through the system, the Threshold jumps from 1 to
245 (Factor 2.5, resulting in blacklisting), although the mail
responsible for that is just 7 MB in size and the quota was at 3MB
out of 200 (see above).

This just seems to be broken, or am I missing something?

Although, I could'nt find any information about what means "abuse(f),
abuse(a) and abuse(p)... can anyone clearify that?

Thanks and have a nice weekend!

Dietmar


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users

Reply via email to