postfix delay

[Drew Marshall]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

On Thu, February 17, 2005 9:33, Steen, Glenn said:
> I'm sure that Drew Marshall (or someone else more knowledgeable than
> lil' ol' me) can confirm/deny this, but AFAIK there is no such feature
> as the sendmail 8.13.1 greet_pause in postfix (Yet... I've looked
> mainly at 2.1 docs).
> -- Glenn

You are right, there isn't a greet_pause function in Postfix. I think the
view is that delying SMTPd connections just uses up SMTPd daemons, which
will then be 'held open' until they time out (As set with smtpd_timeout,
default is 300s) and with a flood of mail you would run out of SMTPd
processes. You could increase them in master.cf but then run the risk of
killing your machine having over used resources.

The closest you get is the smtpd_soft_error_limit which adds a delay
(Default 1s) to smtp connections that make x many errors (Default 10)
during one connection and indeed the smtpd_hard_error_limit (Default 20)
which will disconnect if the number of error continues but this won't help
spam, only directory or relay attacks.

There are other ways to reduce your spam at Postfix level. I would
recommend having a read of http://www.postfix.org/postconf.5.html (Scroll
down to the sections starting 'smtpd_') which gives you all the options.

Drew

>
>> -----Original Message-----
>> From: MailScanner mailing list
>> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of David Curtis
>> Sent: den 16 februari 2005 20:13
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: postfix delay
>>
>>
>> I was following some of the mail flow regarding putting a pause in
>> postfix to help curb some spammers. I think I lost some
>> information some
>> where.
>>
>> I would like to know the command and where to place the
>> command to have
>> postfix pause when accepting a message.
>>
>> Thanks.
>>
>>
>>
>>
>>
>>
>>
>> This email may contain information protected under the Family
>> Educational Rights and Privacy Act (FERPA) or the Health Insurance
>> Portability and Accountability Act (HIPAA).  If this email contains
>> confidential and/or privileged health or student information and you
>> are not entitled to access such information under FERPA or HIPAA,
>> federal regulations require that you destroy this email without
>> reviewing it and you may not forward it to anyone.
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>



--
In line with our policy, this message has
been scanned for viruses and dangerous
content by MailScanner, and is believed to be clean.
www.themarshalls.co.uk/policy

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!