On Tue, Nov 23, 2010 at 10:04:47PM -0600, Stan Hoeppner wrote: > I'm guessing the > latency is actually higher when smtpd queries proxymap than when timing > postmap -q. Is this the case?
Not necessarily, it depends on how memory-constrained your system is. Paging in a large table in a large number of parallel smtpd processes may be more expensive than querying a consolidated table via IPC. The IPC overhead is fractions of a millisecond. I would not use such a table, adding 0.5s of CPU for each client IP lookup is to dear unless your traffic loads are *very* light. Surely there's a better way! Have you considered rbldnd? The SpamHaus PBL zone is a rather large CIDR table (in which all the reject messages are one of two fixed templates in which the lookup key is embedded) and it performs very nicely, since rbldnsd is able to query this efficiently. You should consider an RBLDNS service instead of a large CIDR table. Or find more effective data sources. -- Viktor.