On 3/6/2012 1:23 PM, /dev/rob0 wrote: > My two cents on that: when implementing postscreen, leave your > smtpd_*_restrictions alone. They were working before, so keep them in > reserve. For example, when under stress, it is possible that DNSBL > queries will not return before the 2-second timeout period. In the > time it takes to pass the connection to smtpd and for smtpd to do > checks, those queries may have returned and been cached. It's very > cheap to do a DNS query from your local cache.
Rob, see the recent thread titled "Delay before initial 220 greeting". There's more in play in this OP's case WRT dnsbl queries. In his case it might be better to increase the 2s timeout (if possible) to prevent additional smtpds from spawning. -- Stan
