On Nov 29, 2007 5:17 PM, Scott Silva <<a href="mailto:ssilva@sgvwater.com">ssilva@sgvwater.com</a>> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
on 11/29/2007 1:44 PM Israel Garcia spake the following:<br><div class="Ih2E3d">> Well, I have to tell you I'm continuing with the same problem with too<br>> many messages in HOLD folder and a terrible delay (sometimes 1 hour) and
<br>> because the way my company works it's not allowed to keep messages for<br>> more than 10 min... I have to remember that when I disable spamassassin<br>> in mailscanner everything is fine... There's no dough the cause of my
<br>> problem is the high traffic in my connection to Internet and SA and DNS<br>> timeouts. I was thinking in change SA for another anti-spam ..I read<br>> about Dspam ( <a href="http://www.nuclearelephant.com" target="_blank">
www.nuclearelephant.com</a><br></div>> <<a href="http://www.nuclearelephant.com" target="_blank">http://www.nuclearelephant.com</a>>).. and I want to ask the list if Dspam<br><div class="Ih2E3d">> can be integrated with mailscanner...Any ideas?
<br></div>Have you tried all the ways of slowing your bandwidth use for mail?</blockquote><div>Hi Scott, I have a lot of services (HTTP/FTP) which uses the same link, I use a cisco 1721 router which is almost running out of memory and I dont really know if my IOS permit some kind of QoS... I've been searching on Internet but with no result about this issue...
<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>Limiting connections, blocking spamming IP's at the mta or firewall,<br>blacklists at mta, etc?
</blockquote><div>I have this on my <a href="http://main.cf">main.cf</a>:<br> <br>smtpd_helo_required = yes<br>disable_vrfy_command = yes<br>strict_rfc821_envelopes = yes<br>invalid_hostname_reject_code = 554<br>multi_recipient_bounce_reject_code = 554
<br>non_fqdn_reject_code = 554<br>relay_domains_reject_code = 554<br>unknown_address_reject_code = 554<br>unknown_client_reject_code = 554<br>unknown_hostname_reject_code = 554<br>unknown_local_recipient_reject_code = 554
<br>unknown_relay_recipient_reject_code = 554<br>unknown_sender_reject_code = 554<br>unknown_virtual_alias_reject_code = 554<br>unknown_virtual_mailbox_reject_code = 554<br>unverified_recipient_reject_code = 554<br>unverified_sender_reject_code = 554
<br><br>smtpd_sender_restrictions =<br> check_sender_access hash:/etc/postfix/listanegra<br> reject_non_fqdn_sender<br> reject_unknown_sender_domain permit<br><br><br>smtpd_recipient_restrictions =<br> permit_auth_destination
<br> permit_mynetworks<br> reject_non_fqdn_recipient<br> reject_unknown_recipient_domain<br> reject_unauth_destination<br> reject_non_fqdn_hostname,
<br> reject_non_fqdn_sender,<br> reject_unknown_sender_domain,<br> reject_invalid_hostname,<br> reject_unknown_recipient_domain,<br> reject_unauth_pipelining,
<br> permit_sasl_authenticated,<br> reject_unauth_destination,<br> reject_rbl_client <a href="http://zen.spamhaus.org">zen.spamhaus.org</a><br> reject_rbl_client
<a href="http://list.dsbl.org">list.dsbl.org</a><br> reject_rhsbl_sender <a href="http://dsn.rfc-ignorant.org">dsn.rfc-ignorant.org</a><br> permit<br><br>smtpd_data_restrictions = reject_unauth_pipelining, reject_multi_recipient_bounce, permit
<br><br>smtpd_error_sleep_time = 60<br>smtpd_soft_error_limit = 60<br>smtpd_hard_error_limit = 10<br><br>I want you to know one of my main services is mail, so I have to be careful with this RBLs rules on MTA because I remember I put some rules (reject_rbl_client ) on smtpd_client_restrictions and it drop me a lot of valid mail...
<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br><br>Dns shouldn't need all that much bandwidth, as you can run many lookups over a
<br>dialup connection. Maybe you need to slow some of the other bandwidth uses at<br>your site. Maybe use QOS or other traffic shaping to leave more headroom for<br>your critical apps.</blockquote><div>Scott, I know I have to solve my problem somehow, but a lot of things don't depend on me..I'd like to search all the ways to stop spam and keep my mail safe.. thanks for your answer..
<br><br>regards<br>Israel<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br>--<br>MailScanner is like deodorant...<br>You hope everybody uses it, and
<br>you notice quickly if they don't!!!!<br><font color="#888888"><br>--<br></font><div><div></div><div class="Wj3C7c">MailScanner mailing list<br><a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info
</a><br><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br><br>Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">
http://wiki.mailscanner.info/posting</a><br><br>Support MailScanner development - buy the book off the website!<br></div></div></blockquote></div><br><br clear="all"><br>-- <br>Regards;<br>Israel Garcia