Zitat von Wietse Venema <wie...@porcupine.org>:
lst_ho...@kwsoft.de:With both changes it looks ok now (first blacklisted, second whitelisted): Jan 17 16:28:23 hpux2 postfix/master[28899]: daemon started -- version 2.8.0-RC1, configuration /etc/postfix Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: CONNECT from [10.1.70.1]:48111 Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: entering STRESS mode with 1 connectionsJan 17 16:28:33 hpux2 postfix/postscreen[28903]: BLACKLISTED [10.1.70.1]:48111Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: PASS OLD [10.1.70.1]:48111 Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: leaving STRESS mode with 0 connectionsDo you have a low postscreen_pre_queue_limit limit? It should normally enter stress mode with more than 1 connection. Wietse
Not that i'm aware of. This is a test-only install, so the values are at default beside the parameters needed to get postscreen working, so it should be at $default_process_limit which is reported by postconf with "100".
postconf -n : alias_database = dbm:/etc/postfix/aliases alias_maps = dbm:/etc/postfix/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all local_recipient_maps = unix:passwd.byname $alias_maps mail_owner = postfix mailq_path = /usr/bin/mailq manpage_directory = /usr/local/man mydestination = $myhostname, localhost myhostname = hpux2.hq.kwsoft.de mynetworks = x.x.x.x/32, 127.0.0.0/8 myorigin = $myhostname newaliases_path = /usr/bin/newaliases postscreen_access_list = permit_mynetworks,cidr:/etc/postfix/postscreen_access queue_directory = /var/spool/postfix readme_directory = /var/spool/postfix/README relayhost = [mailer.hq.kwsoft.de] sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtpd_tls_cert_file = /etc/postfix/test.cert smtpd_tls_key_file = /etc/postfix/test.key smtpd_tls_loglevel = 1 smtpd_tls_security_level = may tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 Regards Andreas Regards Andreas
smime.p7s
Description: S/MIME Cryptographic Signature