On 02/27/2018 01:26 PM, Andrei V wrote:
> Hi,
> 
> During bulk mailing (straight from Apple Mail) with large attachment I
> run into bandwidth problem on symmetric 20mbit DSL line. For short
> period of time (several minutes) it becomes almost dead.
> 
> I made these changes in /etc/postfix/main.cf
> smtp_destination_concurrency_limit = 2
> smtp_destination_rate_delay = 1s
> smtp_extra_recipient_limit = 10
> however, I'm not sure it will work as expected since most of these
> options are per-domain limit, yet destination e-mails usually on
> different domains.
> 
> I have this rule in Shorewall
> DNAT loc dmz:192.168.1.2 tcp smtp - ip.xx.yy.zz
> 
> Q: Is it possible to specify straight in this line smtp throughput
> limit, e.g. 1mbit/sec, or only concurrent number of connections and
> burst rate? May this limit throw Postfix into time-out errors>
> DNAT loc dmz:192.168.1.2 tcp smtp - ip.xx.yy.zz 5/sec:10
> 
> Where ip.xx.yy.zz - external IP our provider.

It is only possible to specify the connection rate (as you have shown
above) or the connection limit (concurrent connections). Connections in
excess of those limits will fail with whatever your loc->dmz policy is
(connection refused or timeout).
> 
> Symmetrical DSL is fairly quick yet it can't handle many parallel
> streams of data gracefully.
> 

The above rule is only dealing with loc->dmz traffic. I suspect that the
problem is in the dmz->net path. The best way to address this would be
to implement traffic shaping; that way, you can specify byte-rate limits
on outgoing traffic to TCP port 25.

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to