Zitat von Wietse Venema <wie...@porcupine.org>:

lst_ho...@kwsoft.de:
With both changes it looks ok now (first blacklisted, second whitelisted):


Jan 17 16:28:23 hpux2 postfix/master[28899]: daemon started -- version
2.8.0-RC1, configuration /etc/postfix
Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: CONNECT from
[10.1.70.1]:48111
Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: entering STRESS mode
with 1 connections
Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: BLACKLISTED [10.1.70.1]:48111
Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: PASS OLD [10.1.70.1]:48111
Jan 17 16:28:33 hpux2 postfix/postscreen[28903]: leaving STRESS mode
with 0 connections

Do you have a low postscreen_pre_queue_limit limit? It should
normally enter stress mode with more than 1 connection.

        Wietse

Not that i'm aware of. This is a test-only install, so the values are at default beside the parameters needed to get postscreen working, so it should be at $default_process_limit which is reported by postconf with "100".

postconf -n :

alias_database = dbm:/etc/postfix/aliases
alias_maps = dbm:/etc/postfix/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
html_directory = no
inet_interfaces = all
local_recipient_maps = unix:passwd.byname $alias_maps
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
mydestination = $myhostname, localhost
myhostname = hpux2.hq.kwsoft.de
mynetworks = x.x.x.x/32, 127.0.0.0/8
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases
postscreen_access_list = permit_mynetworks,cidr:/etc/postfix/postscreen_access
queue_directory = /var/spool/postfix
readme_directory = /var/spool/postfix/README
relayhost = [mailer.hq.kwsoft.de]
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_tls_cert_file = /etc/postfix/test.cert
smtpd_tls_key_file = /etc/postfix/test.key
smtpd_tls_loglevel = 1
smtpd_tls_security_level = may
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550

Regards

Andreas




Regards

Andreas






Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to