On Tue, 21 Oct 2008, Jim Balo wrote:

>You should post the results of 'postconf -n'. Perhaps you are missing
>some >smtpd_*_restrictions items that could reduce the load.

broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavisfeed:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
default_destination_concurrency_limit = 100

This default is normally set to 20. Some servers may frown on you attempting to make 100 connections to their server.

delay_warning_time = 1h
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
local_destination_concurrency_limit = 100
local_destination_recipient_limit = 5
local_recipient_maps = unix:passwd.byname $alias_maps
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
message_size_limit = 18000000
mydestination = $mydomain, $myhostname, localhost, localhost.$mydomain
mynetworks = x.xxx.xxx.xxx/xx, 127.0.0.0/8
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
proxy_interfaces = 140.239.184.230
queue_directory = /var/spool/postfix
readme_directory = no
relay_domains =
 $mydestination
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_recipient_limit = 5000
smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated r
eject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
unknown_local_recipient_reject_code = 550

I notice you are not using any blacklist checking. Is there a reason?

This is what I am using:

smtpd_client_restrictions =
  ...
  reject_rbl_client zen.spamhaus.local,
  reject_rbl_client bl.spamcop.net,
  reject_rbl_client dnsbl.njabl.org
  ...

zen.spamhaus.local (we subscribe to the data feed service) rejects over two million connections every 24 hours.

Reply via email to