OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Address verification causing SMTP timeouts

From: Wietse Venema (wietseporcupine.org)
Date: Thu Dec 14 2006 - 12:46:53 CST


Victor Duchovni:
> On Thu, Dec 14, 2006 at 01:38:20PM -0500, Joel Nimety wrote:
> > Noel Jones wrote:
> > > At 06:59 AM 12/14/2006, Robert Fitzpatrick wrote:
> > >> Well, my problem woke me up this morning again after it ran all
> > >> afternoon and last night perfectly. As I mentioned in other threads, my
> > >> SMTP connections on two different servers at different locations start
> > >> to slow. And it started happening on both servers at the same time. So,
> > >> I did some disabling on one server and it seems to be address
> > >> verification.
> > >
> > > This makes sense. Address verification holds the incoming connection
> > > open a little longer to allow time to check the next hop for the
> > > address. This can lead to using up all available smtpd processes.
> > > Increase the MAXPROC column for smtpd in master.cf to fix this.
> >
> > What are the implications of increasing maxproc for smtpd? More memory
> > usage? More cpu usage? Higher system load? I'm trying to decide if
> > turning on address verification and increasing max proc is doable in my
> > situation, the servers are already pretty taxed.
>
> High volume sites (and even low-volume ones IMHO) should not use sender
> address verification, it is no longer a very effective strategy, and
> at this point I believe does more harm than good.

Are you referring to external sender verification or internal
recipient verification?

        Wietse