Re: Postfix snapshot 20091008 with postscreen

2009-10-09 Thread Miguel Di Ciurcio Filho
Wietse Venema wrote: Note, I am primarily interested in keeping the bots away from the real SMTP server. Unlike spamd and other solutions, I am not so much interested in keeping botnets busy. People who want to do that can install spamd. It works with pretty much every MTA. Point taken. Yo

Re: Postfix snapshot 20091008 with postscreen

2009-10-09 Thread Reinaldo de Carvalho
On Fri, Oct 9, 2009 at 11:27 AM, Miguel Di Ciurcio Filho wrote: > Reinaldo de Carvalho wrote: >> >> The sleep time grows cpu time consume and established connections. >> Enforce no sleep time and a very low hard limit (to drop connection) >> has better performace. >> > > How an almost halt process

Re: Postfix snapshot 20091008 with postscreen

2009-10-09 Thread Miguel Di Ciurcio Filho
Reinaldo de Carvalho wrote: The sleep time grows cpu time consume and established connections. Enforce no sleep time and a very low hard limit (to drop connection) has better performace. How an almost halt process, doing nothing could possibly consume any relevant CPU time or bandwidth?

Re: Postfix snapshot 20091008 with postscreen

2009-10-09 Thread Ralf Hildebrandt
* Stan Hoeppner : > Does postscreen run one process per connection, allowing balanced > scheduling across cpus/cores, or is it just one process handling all > connections? If only one process, do you see possible benefit to > pinning its affinity to a single cpu/core in a high traffic > multi-cpu

Re: Postfix snapshot 20091008 with postscreen

2009-10-08 Thread Stan Hoeppner
Wietse Venema put forth on 10/8/2009 1:51 PM: > Postfix snapshot 20091008 includes an updated version of the > postscreen daemon. This means it is no longer limited to the > non-production releases. Does postscreen run one process per connection, allowing balanced scheduling across cpus/cores, or

Re: Postfix snapshot 20091008 with postscreen

2009-10-08 Thread Wietse Venema
Miguel Di Ciurcio Filho: > Wietse Venema wrote: > > Postfix snapshot 20091008 includes an updated version of the > > postscreen daemon. This means it is no longer limited to the > > non-production releases. > > > > Nice! > > There is a cool feature on OpenBSD's spamd that makes zombies suffer a

Re: Postfix snapshot 20091008 with postscreen

2009-10-08 Thread Reinaldo de Carvalho
On Thu, Oct 8, 2009 at 9:00 PM, Miguel Di Ciurcio Filho wrote: > > Another suggestion: rise the default postscreen_greet_wait from 4 to 10 > seconds, or even 15 or 20. I've been using smtpd_error_sleep_time=30s > and so far I had no problems for years and it is very effective keeping > dictionary

Re: Postfix snapshot 20091008 with postscreen

2009-10-08 Thread Miguel Di Ciurcio Filho
Wietse Venema wrote: > Postfix snapshot 20091008 includes an updated version of the > postscreen daemon. This means it is no longer limited to the > non-production releases. > Nice! There is a cool feature on OpenBSD's spamd that makes zombies suffer a lot: -S secs Stutter at greylisted connect

Re: Postfix snapshot 20091008 with postscreen

2009-10-08 Thread Wietse Venema
Wietse Venema: > Postfix snapshot 20091008 includes an updated version of the > postscreen daemon. This means it is no longer limited to the > non-production releases. In case you haven't seen earlier posts on this topic, postscreen was released first in a number of Postfix non-production snapshot

Postfix snapshot 20091008 with postscreen

2009-10-08 Thread Wietse Venema
Postfix snapshot 20091008 includes an updated version of the postscreen daemon. This means it is no longer limited to the non-production releases. To make postscreen safe to deploy, it has a permanent whitelist (default: $mynetworks) that avoids running SMTP protocol tests on broken network applia