Seriously ... a 3.5mb mailout!<span></span><div>Drop the heavy content to a web server and point the html or downloadable pdf or whatever from that.<br><br><br>Fixing the odd saturation is one thing but doing the job properly in the first place would be better</div>
<div><br></div><div><br></div><div>Martin</div><div><br>On Monday, 24 September 2012, Harondel J. Sibble wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Had an odd situation that started Friday night at one of my clients running a<br>
mailscanner/mailwatch mail relay for their internal Exchange 2007 server.<br>
<br>
Basically the dsl connection they share with another office was saturated<br>
when the office admin did a mailout on friday to about 2000 of their<br>
subscribers, each email was about 3.5mb total with conversion overhead. When<br>
I say saturated, I mean in both the upstream and downstream directions.<br>
According the admin who runs the multitenant network in this office, he was<br>
seeing a sustained 1.6mb/s INBOUND connection to my client's firewall while<br>
this was happening.<br>
<br>
I intially though that someone had hacked in and was injecting spam, but<br>
after upstream throttling of the connection and disabling all smtp traffic, I<br>
was able to review the messages in the postfix deferred queue and determine<br>
they were part of the mailout.<br>
<br>
At this point mailq was showing 14 messages with approx 100 recipients total,<br>
I could then re-enable smtp traffic (in/out) at the firewall level and emails<br>
would be fine sending and receiving, but if I did a postqueue -f, the<br>
connection would saturate again until I blocked the smtp traffic, then waited<br>
a couple minutes before re-enabling it and the messages went back to being<br>
deferred.<br>
<br>
I'm trying to figure out the best way to deal witih this moving forward, is<br>
there additional throttling I need to do at the postifx level or the<br>
mailscanner level or something else. I was also surprised as my understand<br>
of postfix is that it does connection throttling by default.<br>
--<br>
Harondel J. Sibble<br>
Sibble Computer Consulting<br>
Creating Solutions for the small and medium business computer user.<br>
<a href="javascript:;" onclick="_e(event, 'cvml', 'help@pdscc.com')">help@pdscc.com</a> (use pgp keyid 0x3AD5C11D) <a href="http://www.pdscc.com" target="_blank">http://www.pdscc.com</a><br>
Blog: <a href="http://www.pdscc.com/blog" target="_blank">http://www.pdscc.com/blog</a><br>
(604) 739-3709 (voice)<br>
<br>
--<br>
MailScanner mailing list<br>
<a href="javascript:;" onclick="_e(event, 'cvml', 'mailscanner@lists.mailscanner.info')">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</blockquote></div><br><br>-- <br>-- <br>Martin Hepworth, CISSP<br>Oxford, UK<br>