OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Tweaking DNS timeouts

From: Viktor Dukhovni (postfix-usersdukhovni.org)
Date: Fri May 17 2013 - 12:53:47 CDT


On Fri, May 17, 2013 at 12:26:13PM -0500, /dev/rob0 wrote:

> > Increasing the greet-wait to 10+ seconds could result in
> > legitimate clients hanging up, so I would not recommend that.
>
> Do we have any testing to validate this? I'm pretty sure I recall
> from a few years back on the old original SPAM-L list that some
> Sendmail people[1] were saying they used greet pauses in excess of 30
> seconds.

It creates a lot of needless congestion on legitimate sending
systems even if they don't hang up.

Now every message (from a small MTA that does not visit often)
starts to take 30s to make a delivery. Queue throughput collapses
and Patrick Raq's MTA can't deliver new mail in a timely fashion.
On the plus side, Wietse and Patrick may finally consider my
"concurrency balooning" suggestion. :-)

Much of the damage to the SMTP infrastructure is done by well-meaning
anti-spam measures. Let's not take it too far.

--
        Viktor.