OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Feature Suggestion: Tar-Pit flag in Postfix 2.1 proxy

From: Len Conrad (LConradGo2France.com)
Date: Mon Feb 02 2004 - 09:12:24 CST


>Yeah! we'd love to see that code! I'm doing the firewall thingie because
>we had the same problem --- hundreds of parallel smtpd's and no mail
>getting delivered.

you can get some, perhaps sufficient, relief from exhaustion of smtpd
sessions by making postfix stmpd very impatient with repeated errors per
smtpd session and with clients slow to advance the SMTP dialog.

Leaving the following params at default values is suicidal:

smtpd_hard_error_limit = 3
smtpd_soft_error_limit = 3
smtpd_timeout = 20

Len

_____________________________________________________________________
http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites