OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Slow queue configuration

From: mouss (moussnetoyen.net)
Date: Tue May 06 2008 - 11:40:34 CDT

Gary W. Smith wrote:
> Hello,
>
> I'm trying to implement a custom queue for lycos. For some off the wall reason they have our IP randomly listed as being in spamhaus. That is, lycos does. spamhaus had it listed when we received the range 60 days ago, but that was fixed 60 days ago...
>
> Because we have a lot of random mail being believered to a couple lycos users, I figured I'd implement a seperate queue for them (as well as AOL while I was at it). Following the troubleshooting methods from http://www.postfix.org/QSHAPE_README.html <http://www.postfix.org/QSHAPE_README.html> , I did the following
>
> Added to master.cf
>
> lycoscom unix - - n - 10 smtpd
> aolcom unix - - n - 10 smtpd
>
> Added to main.cf
>
> transport_maps = hash:/etc/postfix/transport_queues
> lycoscom_destination_concurrency_failed_cohort_limit = 100
> lysoccom_destination_concurrency_limit = 20
> aolcom_destination_concurrency_failed_cohort_limit = 100
> aolcom_destination_concurrency_limit = 20
>
> Added to transport_queues (and postmap'd it as well)
>
> aol.com aolcom:
> lycos.com lycoscom:
>
> But I still seem to be getting all of the mail in the deferred queue anyway.
>
> T 5 10 20 40 80 160 320 640 1280 1280+
> TOTAL 46 0 6 0 0 2 0 0 1 2 35
> lycos.com 36 0 0 0 0 0 0 0 0 1 35
> aol.com 6 0 2 0 0 2 0 0 1 1 0
>
> Is this the expected result or should I see the mail fall into their own queues. The queue was implemented two days ago, so all of the email for AOL should have been in the new queues.
>
> Any suggestions?
>
>

do you send via the same MTA as you do here? If so:

your IP has a generic rDNS:
$ host 209.209.83.2
2.83.209.209.in-addr.arpa domain name pointer
209-209-83-2.static.oak.inreach.net.

and your helo does not resolve:
$ host pxtoakiis01.pxt.primeexalia.com
Host pxtoakiis01.pxt.primeexalia.com not found: 3(NXDOMAIN)

These are enough to get you blocked/discarded/quarantined/tagged whether
listed in a DNSBL or not.