[policyd-users] Postfix MAXPROC

2007-08-30 Thread Leon de Jager
Hi, I have a setup of 6 MX servers, each running policyd and a database server with approximately 9 million records in the triplet table. Recently every now and then the MX's starts timing out when attempting smtp connections to it and on closer inspection I can see the default maxproc of postfix

[policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Geert Hendrickx
Hi, has anyone experienced bad interaction between greylisting and (by default) low smtpd_hard_error_limit settings in postfix? Our smtpd_hard_error_limit has always been pretty high so I can't tell from my own experience. But with greylisting, clients get an error on each RCPT command initially

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Cami Sardinha
Geert Hendrickx wrote: > Hi, > > has anyone experienced bad interaction between greylisting and (by default) > low smtpd_hard_error_limit settings in postfix? Our smtpd_hard_error_limit > has always been pretty high so I can't tell from my own experience. But > with greylisting, clients get an e

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Cami Sardinha
Cami Sardinha wrote: > Geert Hendrickx wrote: >> Hi, >> >> has anyone experienced bad interaction between greylisting and (by default) >> low smtpd_hard_error_limit settings in postfix? Our smtpd_hard_error_limit >> has always been pretty high so I can't tell from my own experience. But >> with g

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Geert Hendrickx
On Thu, Aug 30, 2007 at 02:32:08PM +0200, Cami Sardinha wrote: > As Wietse has pointed out, you should be whitelisting the legitimate bulk > senders.. In an ISP environment, it is not obvious to know all your legitimate smtp clients... Geert -

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Cami Sardinha
Geert Hendrickx wrote: > On Thu, Aug 30, 2007 at 02:32:08PM +0200, Cami Sardinha wrote: >> As Wietse has pointed out, you should be whitelisting the legitimate bulk >> senders.. > > In an ISP environment, it is not obvious to know all your legitimate smtp > clients.. Indeed. We had training mode

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Geert Hendrickx
On Thu, Aug 30, 2007 at 03:27:08PM +0200, Cami Sardinha wrote: > Indeed. We had training mode running for about 2 months in > order to identify the top senders / email addresses. After > that point when people complained, they were whitelisted. > > There was a 2 -> 3 weeks teething period after go

Re: [policyd-users] greylisting vs postfix smtpd_hard_error_limit

2007-08-30 Thread Cami Sardinha
Geert Hendrickx wrote: > On Thu, Aug 30, 2007 at 03:27:08PM +0200, Cami Sardinha wrote: >> Indeed. We had training mode running for about 2 months in >> order to identify the top senders / email addresses. After >> that point when people complained, they were whitelisted. >> >> There was a 2 -> 3 w

Re: [policyd-users] Postfix MAXPROC

2007-08-30 Thread Rianto Wahyudi
How often do you run cleanup script ? How long do you set the triplet expiry ? Try selecting a triplet from MySQL and see how long does it take .. My other suggestion : - Make sure that policyd is called after recipient verification / after blacklist. - run DNS cache locally - run RBL locally