From: Noel Jones (njonesmegan.vbhcs.org)
Date: Mon Aug 28 2006 - 11:27:17 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

At 08:53 AM 8/28/2006, Ramprasad wrote:
>I have enabled Cached Remote Address verification on my
>postfix server
>which is used as a relay server
>
>I am confused about a few parameters
>What is the difference between
>address_verify_negative_expire_time and
>address_verify_negative_refresh_time

The expire time is the time at which an entry is considered
no longer valid.
The refresh time is the time postfix will attempt to verify
the entry is still correct. If the entry is no longer
correct (ie. no answer or a different answer) postfix will
still wait *_expire_time before the status of the entry is
changed.

>If a new user is added on the actual server, how long will
>he have to
>wait to start receiving mails on the postfix server

No wait if the address has never been verified as
undeliverable. If the address has been verified as
undeliverable, you must wait
address_verify_negative_expire_time from the last "verified
undeliverable" probe.

>Besides is there an API/command to delete entries from the
>postfix
>verification map. So that I can force refresh of a single
>entry

The structure of the database is (intentionally)
undocumented, and may change without warning in future
postfix versions. No database maintenance tools are provided.
That said, you can probably:
- use "postmap -s btree:/path/to/verify" to list the
contents of the file.
- stop postfix
- use "postmap -fd userexample.com btree:/path/to/verify"
to remove the offending entry from the verify database
   + probably wouldn't bee too hard for a perl wizard to
create some view/remove tools, maybe someone will someday.
- start postfix.

No guarantee, but this has worked for me. Make sure
postfix is stopped before modifying the database or the
database will likely end up corrupted. The only current
fix for a corrupted database is to remove the database and
start over.
Since postfix must be stopped for this procedure, it is
only suitable for the occasional emergency. For general
use, make sure your address_verify_negative_expire_time is
set to some locally-acceptable value.

--
Noel Jones

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]