Re: [SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-29 Thread Reindl Harald
Am 29.07.2012 11:48, schrieb Mark Alan: >> if you do not trust you OUTGOING traffic the only valid >> reason is that you doubt your machine is comprimised > > [The problem, as said in another email, is (mostly) solved] > > - I do not trust anything connected 24h to the Internet then shut it do

Re: [SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-29 Thread Mark Alan
On Sun, 29 Jul 2012 00:33:49 +0200, Reindl Harald wrote: > Am 28.07.2012 20:03, schrieb Mark Alan: > >> The solution is to exempt traffic sent from the machine from the > >> rate controls. > > > > In 2012, in a server facing the net and running other services > > besides mail, I would not call i

Re: [SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-28 Thread Reindl Harald
Am 28.07.2012 20:03, schrieb Mark Alan: >> The solution is to exempt traffic sent from the machine from the rate >> controls. > > In 2012, in a server facing the net and running other services besides > mail, I would not call it a safe bet. In the event (that must be > accounted for) of an intru

[SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-28 Thread Mark Alan
On Sat, 28 Jul 2012 14:42:59 +, Viktor Dukhovni wrote: > On Sat, Jul 28, 2012 at 09:10:34AM -0400, Wietse Venema wrote: > > > Thus, VERP increases the number of parallel connections. This may > > result in overflow of state tables in under-powered stateful > > routers, causing them to drop