Re: Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread Devin Reade
--On Friday, June 10, 2016 09:04:07 PM + ML mail wrote: Well right now I have max-children on 50, so you mean lowering this value to something like 10? But then if I receive 20 simultaneous incoming SMTP connection, what will happen to the 10 others?Will they fail/timeout or simply wait?

Re: Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread Edgar Pettijohn
Would filter-pause not work for you? Sent from my iPhone > On Jun 10, 2016, at 4:04 PM, ML mail wrote: > > Well right now I have max-children on 50, so you mean lowering this value to something like 10? But then if I receive 20 simultaneous incoming SMTP connection, what will happen to the 10 ot

Re: Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread Devin Reade
Seems like the wrong solution. How about altering spamassassin's max-children parameter instead?

Re: Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread ML mail
Well right now I have max-children on 50, so you mean lowering this value to something like 10? But then if I receive 20 simultaneous incoming SMTP connection, what will happen to the 10 others?Will they fail/timeout or simply wait? On Friday, June 10, 2016 11:01 PM, Devin Reade wrote:

Random delay on incoming SMTP connection to OpenSMTPD

2016-06-10 Thread ML mail
Hi, Is it somehow possible to add a random delay of between 5-10 seconds upon a new incomming connection to OpenSMTPD on OpenBSD? I am asking this because I sometime have 20 mails all arriving at the same time and then spamassassin is really slow because it spawns 20 processes and uses all my

FW: FW: smtpd and syslog

2016-06-10 Thread Peter Fraser
it had to have known that it maillog.debug, without parsing it and that information would have help a lot -Original Message- From: Todd C. Miller [mailto:todd.mil...@courtesan.com] Sent: Friday, June 10, 2016 3:35 PM To: Peter Fraser Cc: 'misc@openbsd.org' Subject: Re: FW: smtpd and sysl

Re: FW: smtpd and syslog

2016-06-10 Thread Todd C. Miller
On Fri, 10 Jun 2016 19:20:23 -, Peter Fraser wrote: > But what bothered me was the thousands of lines in /var/log/messages > saying > > sendsyslog: dropped 2 messages, error 55 > > when I first noticed I had forgot that I had modified smtd_flags > and had no idea why my log files were fillin

FW: smtpd and syslog

2016-06-10 Thread Peter Fraser
The problem isn't so much that the trace message were missing. I assumed that they only occurred when smtpd -d was used. As a result I didn't immediately update the smtpd_flags using rcctl. It is nice to know why the trace entries were no showing up. But what bothered me was the thousands of lines

Re: smtpd and syslog

2016-06-10 Thread Todd C. Miller
The trace messages are logged at the debug level. You'll need to edit /etc/syslog.conf and change: mail.info /var/log/maillog to: mail.debug /var/log/maillog Then you should see the trace information. - todd

Re: smtpd and syslog

2016-06-10 Thread Peter Fraser
Trying to find a problem with smtpd used rcctl change the standard configuration to rcctl get smtpd smtpd_class=daemon smtpd_flags=-T all -v smtpd_timeout=30 smtpd_user=root and restarted smtpd I expected more detailed logging to occur in maillog There did not appear to be any extra messages

Re: /usr/ and wxallowed

2016-06-10 Thread Marc Espie
On Thu, Jun 09, 2016 at 08:45:25PM +0100, Kevin Chadwick wrote: > Yep, I have no idea why someone wouldn't. I like having nosuid > on less trusted /usr/local. > > It pretty much removes the need to do the security technique of find > suid, like is recommended on Linux almost by "default"? I forget

Re: pf changes port on udp nat-to and rdr-to reply packets (RTP stream)

2016-06-10 Thread Andy Lemin
Because of this "Remember that static-port means you can't have two machines behind the same NAT using the same source port and destination.", you should instead probably use "binat-to" as a good practice. This will help force you to not be able to accidentally reuse the same public IP for another