Re: Rate limiting with anvil

2009-11-25 Thread Victor Duchovni
On Wed, Nov 25, 2009 at 01:20:45PM +0100, Daniel Ryslink wrote: > anvil_rate_time_unit = 300 > mynetworks = $config_directory/our_network_blocks What is in this file? > smtpd_client_connection_rate_limit = 30 > smtpd_client_message_rate_limit = 100 > smtpd_client_recipient_rate_limit = 60 These

Re: Rate limiting with anvil

2009-11-25 Thread Wietse Venema
By default, Postfix will exclude clients in mynetworks from smtpd_client_mumble_limits. You may want to specify a separate list for mynetworks (relay control) and for anvil (rate control). http://www.postfix.org/postconf.5.html#smtpd_client_event_limit_exceptions (with Postfix 2.1, this was calle

Re: Rate limiting with anvil

2009-11-25 Thread Daniel Ryslink
Thank you for answering, here is the requested information: According to the instructions in the mailing list welcome message, send postconf -n output instead of cut-and-paste. alias_database = hash:/etc/mail/aliases alias_maps = hash:/etc/mail/aliases allow_min_user = yes allow_percent_hack

Re: Rate limiting with anvil

2009-11-25 Thread Wietse Venema
Daniel Ryslink: > Hello, > > I am trying to set rate limits on our smtp relays to prevent abusive > (compromised) user hosts from flooding the service with fast, intensive mail > floods. > > I have used the following directives (I can post whole main.cf, but I don't > think it's necessary): >

Rate limiting with anvil

2009-11-25 Thread Daniel Ryslink
Hello, I am trying to set rate limits on our smtp relays to prevent abusive (compromised) user hosts from flooding the service with fast, intensive mail floods. I have used the following directives (I can post whole main.cf, but I don't think it's necessary): smtpd_recipient_limit =

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Eduardo Júnior wrote: > > Hi, > Hi, > > just a detail: > > > > With postfwd, i didn't get control how many messages a IP can to send. > > But my control have done through number of connections from host. > > If you consider that a connection is equal a message, this is ok. > > > That ma

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Eduardo Júnior
Hi, 2009/8/5 Eduardo Júnior : > Hi, > > > On Wed, Aug 5, 2009 at 1:33 PM, Ing. Davy Leon > wrote: >> Wich policy daemon would you guys recommend to install? I have a Postfix >> 2.3.3 with amavisd-new and clamav running. >> >> Cheers >> >> David > > > I use postfwd [1] for that > And it works wel

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Eduardo Júnior
Hi, On Wed, Aug 5, 2009 at 1:33 PM, Ing. Davy Leon wrote: > Wich policy daemon would you guys recommend to install? I have a Postfix > 2.3.3 with amavisd-new and clamav running. > > Cheers > > David I use postfwd [1] for that And it works well for me. To build the rules is necessary time, just

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Ing. Davy Leon
Wich policy daemon would you guys recommend to install? I have a Postfix 2.3.3 with amavisd-new and clamav running. Cheers David

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Noel Jones
Jaroslaw Grzabel wrote: Hi, Wietse Venema wrote: Instead, use a policy daemon with persistent database. As far as I remember I tried once http://www.policyd.org, but it didn't work for me. As I remember there was a problem with message accounting, ... Or maybe you have different policy daem

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Hi, Wietse Venema wrote: > Instead, use a policy daemon with persistent database. > As far as I remember I tried once http://www.policyd.org, but it didn't work for me. As I remember there was a problem with message accounting, and I have got an email from Nigel from policyd where he confirmed

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Wietse Venema
Jaroslaw Grzabel: > My company decided to limit a number of messages per day per IP. That's > why we run anvil and limit 1000msg/24h/IP, so I put into main.cf: Don't use anvil(8) for long-term statistics. ANVIL(8) ANVIL(8) ... Th

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Stefan Förster wrote: > "Clients that are excluded from connection count, connection rate, > or"... "excluded". > Ah... you're completely right :). I've enabled limiting for everyone from the list besides rest of the world! :). > I think you need Postfix 2.4 or later to work with that bang-s

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Stefan Förster
* Jaroslaw Grzabel : > I had a problem with rate limiting in postfix in last week, and I had to > disable it. I don't know why but I set up rate limiting per IP and it > looks like it didn't count rates correctly. Let me shed a lit a bit for > my problem. > > My company decided to limit a number o

Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Hi everyone, I had a problem with rate limiting in postfix in last week, and I had to disable it. I don't know why but I set up rate limiting per IP and it looks like it didn't count rates correctly. Let me shed a lit a bit for my problem. My company decided to limit a number of messages per day