OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Postfix queuing before forward....?

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Mon Apr 04 2005 - 11:37:06 CDT


On Mon, Apr 04, 2005 at 09:31:38AM -0700, Chris Wisecarver wrote:

> On Sat, 2 Apr 2005 01:32:44 +0200
> Magnus B?ck <magnusdsek.lth.se> wrote:
>
> > On Friday, April 01, 2005 at 21:41 CEST,
> > Chris Wisecarver <chriswisecarvermpowercom.net> wrote:
> >
> > > I'm setting up an SMTP server with Postfix+MySQL+MailScanner.
> >
> > Bad idea. Sooner or later you will lose mail with MailScanner.
> > Read the archives.
>
> I have read the archives. In all the examples I have found people
> only lost mail with MailScanner when they set it up to read from a queue
> postfix was keeping track of. My setup drops all mail into the hold
> queue using header_checks and doesn't pick it back up until it hits the
> incoming directory. There shouldn't be a problem according to what I've
> read in the archives and on the mailscanner site.

No, yours is the specific scenario that is advised against. The changes
mailscanner makes to the Postfix (on hold) queue files are unsafe and
unsupported.

> I'd be happy to use amavis, it's approach as an smtp host makes a lot
> more sense in my setup than poking through a mailservers queue, but in
> my testing I could process about 100 messages in 15 sec with MailScanner
> and about 1 per second with amavisd-newd. Both of them were using the
> same version of SpamAssassin and clamav. That's enough of a performance
> difference to justify the cludge as far as I'm concerned. If there's
> another alternative I'd be happy to try it but amavis is just too slow.
>

Disable all features that perform remote DNS lookups. Almost certainly
the latency you encountered is due to DNS lookups that you really don't
want in a post-queue filter. While amavis is not very fast, it is unlikely
to be as slow as you report.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>