Am 17.05.2014 18:30, schrieb [email protected]: > On Sat, May 17, 2014, at 09:23 AM, Viktor Dukhovni wrote: >>> I understand this is likely botnet-generated traffic. They occur all >>> day long, typically ~1-10 times/minute. >> >> Typical input capacity of a Postfix mail server is over 100 messages >> per second (sometimes 10s of messages per second if performing CPU- >> intensive content filtering). This includes the cost of writing >> the message to disk, and related processing. >> >> The cost of rejecting 1-10 messages per minute is negligible. > > I think I was unclear. Just to be sure, by > > "typically ~1-10 times/minute" > > I meant 1-10 of these *bursts* per minute; i.e. up to ~100 messages > attempted per minute.
peaks of 100 rejected messages per minute is *nothing* frankly you can receive 100 messages per minute with no real load we have days with 1200000 rejected messages on a Barracuda appliance which in many cases even reveice and store the complete message for analyzes while reject at end-of-data, postfix usually don't receive a message it rejects and "hangs up" before message data 120000 in 24 hours = 120000 / 1440 = 833 per minute as average and you see peaks of 5000 rejected messages per minute on such days
