On 7/7/2014 12:36 PM, btb wrote:
> On 2014.07.07 12.39, Wietse Venema wrote:
>> Find out why it takes 6.2 seconds to connect over TCP and to
>> complete the SMTP handshake with the remote SMTP server.
> 
> given postscreen_greet_wait, it's a coincidence that the remote
> server's postscreen logs show that same delay ~6 second delay, but
> list it as PASS OLD:
> 
> Jul  6 08:26:23 mta1 postfix/postscreen[16943]: CONNECT from
> [10.36.40.26]:45643 to [10.3.70.5]:25
> Jul  6 08:26:29 mta1 postfix/postscreen[16943]: PASS OLD
> [10.36.40.26]:45643
> 
> the timing seems to suggest postscreen, but obviously PASS OLD says
> otherwise.  other PASS OLD log entries show no such delay.  i'll
> investigate further.
> 
> in the mean time, how can i configure postfix to wait longer for
> verification?
> 
> -ben

The controls are:
http://www.postfix.org/postconf.5.html#address_verify_poll_count
(default 3)
http://www.postfix.org/postconf.5.html#address_verify_poll_delay
(default 3s)

Use great care when adjusting these.

If postfix waits too long for address verification replies, it can
cause a denial of service by keeping all the smtpd workers busy
doing nothing.

The better solution is to identify and fix your network delay.


  -- Noel Jones

Reply via email to