I've noticed a lot of people try to put policyd further "down" in the list of smtpd_recipient_restrictions entires in an attempt to load the system less. Well, in most cases, the extra load needed to -- for example -- see if the connection is whitelisted is so low that we decided some time ago to just put the policyd check at the very top, since performance gains were virtually unmeasurable. We receive around one million email messages per day, so performance certainly has been a longstanding issue of importance to us.
--Tobias Cami Sardinha wrote: > Alexandru Constantinescu wrote: > >> smtpd_recipient_restrictions = >> permit_mynetworks, >> permit_sasl_authenticated, >> check_recipient_access mysql:/etc/postfix/mysql-recipient.cf, >> reject_unauth_destination, >> permit_mx_backup, >> permit_auth_destination, >> check_policy_service inet:127.0.0.1:10031, > > The problem is you allow sasl users (and people in my networks) > to bypass all your restrictions completely.. > > smtpd_recipient_restrictions = > check_policy_service inet:127.0.0.1:10031, > permit_mynetworks, > permit_sasl_authenticated, > check_recipient_access mysql:/etc/postfix/mysql-recipient.cf, > reject_unauth_destination, > permit_mx_backup, > permit_auth_destination, > [..] > > On a side note, you really should re-look at your restrictions > as there appears to be a number of problems / oversights. > (Post your config to the Postfix mailing list for people to > look over) > > Cami > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > policyd-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/policyd-users ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ policyd-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/policyd-users
