OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: spawn time limit

From: D.J. Fan (mr88talenthotmail.com)
Date: Fri Sep 02 2005 - 10:40:57 CDT


>Using version 2.2.4 on a relay server.
>
>I'm using policyd-weight and have placed this in master.cf:
>
>policy unix - n n - - spawn
> user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-weight
>
>according to man spawn(8)
>transport_time_limit ($command_time_limit)
> The amount of time the command is allowed to run before it is terminated.
>
>Where 'transport' is the transport used (If I assume correctly).
>
>So in main.cf, I placed
>policy_time_limit = 300s
>
>but this setting does not show up in the output of 'postconf -n'
>
>I am using this setting correctly? Is it deprecated? What is the
>correct way to alter the time a command is allowed to run
>(when using spawn)? Is smtpd_policy_service_timeout
>related at all to this, or should I simply adjust command_time_limit?
>
>alias_database = hash:/etc/aliases
>alias_maps = hash:/etc/aliases
>biff = no
>command_directory = /usr/sbin
>config_directory = /etc/postfix
>daemon_directory = /usr/lib/postfix
>inet_protocols = ipv4
>local_recipient_maps =
>local_transport = error:no local mail delivery
>mailbox_size_limit = 15728640
>mydestination =
>myhostname = mail.example.com
>mynetworks = 127.0.0.0/8, xx.xx.xxx.0/28
>myorigin = example.com
>recipient_delimiter =
>relay_domains = hash:/etc/postfix/relay_domains
>relay_recipient_maps = hash:/etc/postfix/relay_recipients
>relayhost = [xx.xx.xxx.xx]
>setgid_group = postdrop
>smtpd_helo_required = yes
>smtpd_sender_restrictions =
> check_sender_access hash:/etc/postfix/access
> reject_non_fqdn_sender
> reject_unknown_sender_domain
>
>smtpd_recipient_restrictions =
> permit_mynetworks
> reject_unauth_destination
> check_helo_access hash:/etc/postfix/helo_access
> check_recipient_access hash:/etc/postfix/roleaccount_exceptions
> check_client_access hash:/etc/postfix/rbl_client_exceptions
> reject_unauth_pipelining
> check_policy_service unix:private/policy
>
>transport_maps = hash:/etc/postfix/transport
>virtual_alias_maps = hash:/etc/postfix/virtual
>

Sorry, I have just noticed:
http://www.postfix.org/SMTPD_POLICY_README.html
so the setting I wanted to make was:
policy_time_limit = 3600
but this still does not show up in 'postconf -n', so I'm not convinced
the setting has any effect. At any rate, wouldn't it be
policy_time_limit = 3600s ?

Thanks,
D.J. Fan

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/