v.dimit...@synergetic.ag:
> Hi All,
> 
> I understand that maintaining a (small) temporary whitelisting is
> more appropriate way, but still for me also make sence to have a
> temporary blacklisting maintained the same way postscreen temporary
> whitelisting does.

Can you use rbldnsd or memcached? That should perform better than
sharing a database through the proxymap server (proxymap is not
designed for the low-latency lookups that postscreen requires, and
MySQL is totally unsuitable from a performance point of view).

You can use postmap to lookup/add/delete entries in a memcache table.

        Wietse

> Is it possible to provide a command line tool, which trough proxymap
> can change postscreen_cache_map records ( add / delete ) ?  This
> way it will be much easier and faster to work with for example
> fail2ban without the need to reload Postfix ( as stated in "postscreen
> blacklist painful refresh " thread from Anon Wed May 23, 2012 9:23
> am).
>
>
>
>
> At the moment i'm considering to implement a fail2ban + Mysql +
> Postscreen test system,
>   "postscreen_access_list = mysql_access_list.cf"
> leaving TTL to Mysql, but so i'm facing the limit of max number
> simultaneous connections because of mysql table instead of btree/cidr
> etc.
>
>
>
>
> Exscuse my lack of deep knowage about it ... and my english.
>
>
>
> Best Regards Vladislav Dimitrov

Reply via email to