Viktor Dukhovni:
> On Thu, Jan 03, 2019 at 02:57:34PM -0500, Viktor Dukhovni wrote:
> 
> > Postfix fragments the queue by (nexthop, recipient) rather
> > than just the nexthop.  You're looking for a feature that ignores
> > both the nexthop and the recipient aggregates all nexthops into a
> > single unified transport-wide queue.  No code for that exists.
> 
> If you're willing run your own franken-postfix, hard coded to run
> one queue per transport whenever the recipient limit > 1, you could
> test the below.  I have no time to create a documented configurable
> (mis)feature along these lines.

He needs a SYN rate limiter.

The firewall blocks even when connections are not completed.
How do you propose to rate-limit SYN from within Postfix?

        Wietse

Reply via email to