OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: access file : DISCARD vs REJECT

From: mouss (usebsdfree.fr)
Date: Fri Apr 07 2006 - 15:49:41 CDT


Jonathan Dill wrote:
> After dusting out the cobwebs from my brain :) I think I recall that
> with some versions of postfix, DISCARD is ignored if in main.cf:

If that is true, then it would be a bug.

>
> smtpd_delay_reject = no
>
> There should be error messages about DISCARD being ignored if that is
> the case. However, changing that to "yes" has negative performance
> implications, although I do not recall the specifics.
>

there are no perf implications, unless you repeat checks, such as in:

smtpd_client_restrictions =
        do_foo

smtpd_helo_restrictions =
        do _foo
...

but even then, this is unnoticeable except if you're calling a heavy
weight policy service that recompiles itself at each invocation:)

> If you know some address is sending you mainly spam with forged From and
> no useful mail, isn't it better to DISCARD to avoid creating backscatter
> to a third party?
>

- when you reject, you don't backscatter. if backscatter is, then it is
generated by the client mta, which should not be your problem.

- discard is irresponsible, unless you are 200% certain to only discard
a bad mail. and in general, you can't. Quarantine if you want, but no
discard and no bounce. of course, recipients may do whatever they want
with mail they receive.