On Friday 23 January 2009 11:32:04 ram wrote:
>
> On Fri, 2009-01-23 at 11:04 +0100, Richard Foley wrote:
> > Hi postfix profis,
> >
> > I'm running postfix 2.1.5-9
>
> If it isnt broken , dont fix it :-)
>
Sage advice :-)
> If you are seeing a lot of reject lines ( because of spamhaus ? ). That
> is natural. We get upto 400k connections per hour on some of our postfix
> servers and postfix handles them all well. 80% get rejected.
>
Yep, I think postfix is doing a fine job, and I've RTFM'd quite a bit as well
and read this list (not back2back...), and I'm happy to see the rejects. I
was just wondering if I was doing anything obviously inefficient, given that
I'm not an expert postfix admin. I realise it's a bit of a 'how long is a
piece of string' question, because there's almost always some room for
improvement...
> What are you trying to optimize ? Are you looking to upgrade your
> postfix (2.1x is old )
>
Upgrade is imminent.
> 1) Do you reject unknown users using
> check_recipient_access pcre:/etc/postfix/recipient_checks
> a hash map or a cdb map file may be better
>
This file is very minimal:
/^\@/ 550 invalid address
/[...@].*\@/ 550 weird addresses
> 2) smtpd_sender_restrictions seems to duplicate checks in
> smtpd_recipient_restrictions , so you may drop them
>
Ah, well spotted.
> 3)The smtpd_recipient_restrictions seems to have an unnecessary
> reject_unknown_recipient_domain, If you are rejecting unknown users
>
Ok.
Thanks for your feedback.
--
Richard Foley
Ciao - shorter than aufwiedersehen
http://www.rfi.net/
