Re: Stress docs update

2012-05-06 Thread Wietse Venema
This is now updated.

Wietse

Other measures to off-load zombies

The postscreen(8) daemon, introduced with Postfix 2.8, provides
additional protection against mail server overload. One postscreen(8)
process handles all connections from "new" SMTP clients, and allows
only well-behaved clients to talk to a Postfix SMTP server process.
By keeping spambots away, postscreen(8) leaves more SMTP server
processes available for legitimate clients, and delays the onset
of server overload conditions.


Re: Stress docs update

2012-05-04 Thread Michael Orlitzky
On 05/03/12 05:14, Rob Sterenborg wrote:
>>
>>   Credits 
> 
> According to the POSTSCREEN_README, postscreen doesn't do greylisting at
> all: postscreen and greylisting are different things. The below is your
> patch adapted with a partial copy-paste from the POSTSCREEN_README.
> 

When a client passes the deep protocol tests, postscreen sends it a 4xx;
that's essentially greylisting. But, there's no need to mention that on
STRESS_README: it can be inferred from POSTSCREEN_README.


RE: Stress docs update

2012-05-03 Thread Rob Sterenborg
> -Original Message-
> From: owner-postfix-us...@postfix.org [mailto:owner-postfix-
> us...@postfix.org] On Behalf Of DTNX Postmaster
> Sent: Thursday, May 03, 2012 10:43 AM
> To: postfix users
> Subject: Re: Stress docs update
> 
> Please let me know if this isn't the right format, style and such;
> 
> $ diff -u STRESS_README.html STRESS_README-postscreen.html
> --- STRESS_README.html2012-05-03 10:20:36.0 +0200
> +++ STRESS_README-postscreen.html 2012-05-03 10:26:27.0
> +0200
> @@ -520,11 +520,12 @@
>  server. Other clients are tarpitted, and will never get a chance
>  to affect mail server performance. 
> 
> - At some point in the future, Postfix may come with a simple
> -front-end daemon that does basic greylisting and pipelining detection
> -to keep zombies and other ratware away from Postfix itself. This
> -would use the "pass" service type which has been available in
> -stable Postfix releases since Postfix 2.5. 
> + Since version 2.8, Postfix ships with a front-end daemon called
> +postscreen(8) that does basic
> +greylisting and pipelining detection to keep zombies and other
> ratware
> +away from Postfix itself. For further information and implementation
> +details, see POSTSCREEN_README.
> +
> 
>   Credits 

According to the POSTSCREEN_README, postscreen doesn't do greylisting at
all: postscreen and greylisting are different things. The below is your
patch adapted with a partial copy-paste from the POSTSCREEN_README.


--
Rob


--- STRESS_README.html  2012-05-03 10:54:00.624335965 +0200
+++ STRESS_README-postscreen.html 2012-05-03 10:58:40.638712109 +0200
@@ -503,11 +503,14 @@
 server. Other clients are tarpitted, and will never get a chance
 to affect mail server performance. 
 
- At some point in the future, Postfix may come with a simple
-front-end daemon that does basic greylisting and pipelining detection
-to keep zombies and other ratware away from Postfix itself. This
-would use the "pass" service type which has been available in
-stable Postfix releases since Postfix 2.5. 
+ Since version 2.8, Postfix ships with a front-end daemon called
+postscreen(8) that performs triage
+on multiple inbound SMTP connections at the same time. While a single
+postscreen(8) process keeps zombies away from Postfix SMTP server
+processes, more Postfix SMTP server processes remain available for
+legitimate clients. For further information and implementation
+details, see POSTSCREEN_README.
+
 
  Credits 



Re: Stress docs update

2012-05-03 Thread DTNX Postmaster
On May 1, 2012, at 18:32, Wietse Venema wrote:

> Michael Orlitzky:
>> At the bottom of the stress readme,
>> 
>>  http://www.postfix.org/STRESS_README.html#other
>> 
>> there is an allusion to what would eventually become postscreen. Might
>> as well update it with a sentence and a link to POSTSCREEN_README.html?
> 
> Right. Who has time?
> 
>   Wietse

Please let me know if this isn't the right format, style and such;

$ diff -u STRESS_README.html STRESS_README-postscreen.html 
--- STRESS_README.html  2012-05-03 10:20:36.0 +0200
+++ STRESS_README-postscreen.html   2012-05-03 10:26:27.0 +0200
@@ -520,11 +520,12 @@
 server. Other clients are tarpitted, and will never get a chance
 to affect mail server performance. 
 
- At some point in the future, Postfix may come with a simple
-front-end daemon that does basic greylisting and pipelining detection
-to keep zombies and other ratware away from Postfix itself. This
-would use the "pass" service type which has been available in
-stable Postfix releases since Postfix 2.5. 
+ Since version 2.8, Postfix ships with a front-end daemon called
+postscreen(8) that does basic
+greylisting and pipelining detection to keep zombies and other ratware
+away from Postfix itself. For further information and implementation
+details, see POSTSCREEN_README.
+
 
  Credits 


HTH,
Jona


Re: Stress docs update

2012-05-01 Thread Wietse Venema
Michael Orlitzky:
> At the bottom of the stress readme,
> 
>   http://www.postfix.org/STRESS_README.html#other
> 
> there is an allusion to what would eventually become postscreen. Might
> as well update it with a sentence and a link to POSTSCREEN_README.html?

Right. Who has time?

Wietse


Stress docs update

2012-05-01 Thread Michael Orlitzky
At the bottom of the stress readme,

  http://www.postfix.org/STRESS_README.html#other

there is an allusion to what would eventually become postscreen. Might
as well update it with a sentence and a link to POSTSCREEN_README.html?