mouss,

> >    -o local_recipient_maps=
> I don't like this. you have no_unknown_recipient_checks, so why change
> the map?
> >    -o relay_recipient_maps=
> nor this

The README.postfix has these in the example, since we don't know
what other settings a site has and it doesn't hurt to turn off
a check that has already been performed. It is certainly not
necessary when one knows what he is doing.

> >    -o smtpd_restriction_classes=
> >    -o smtpd_delay_reject=no
> >    -o smtpd_client_restrictions=permit_mynetworks,reject
> >    -o smtpd_helo_restrictions=
> >    -o smtpd_sender_restrictions=
> >    -o smtpd_recipient_restrictions=permit_mynetworks,reject
> so you're doing the same checks twice (in client and recipient stages).
> >    -o mynetworks_style=host
> this is useless given the following line:
> >    -o mynetworks=127.0.0.0/8

True. The reason is backwards compatibility, or the 'just in case' reason.
Up to amavisd-new-2.3.0 there was only smtpd_recipient_restrictions
in README.postfix, no smtpd_client_restrictions. It turns out
it is more prudent to reject connections from non-authorized
clients at an earlier stage, so I added smtpd_client_restrictions
to the instructions, but didn't remove the smtpd_recipient_restrictions,
just in case someone does a sloppy job on updating his config.
I guess with 2.4.0 I can now suggest: '-o smtpd_recipient_restrictions='.

> >    -o strict_rfc821_envelopes=yes
> >    -o smtpd_error_sleep_time=0
> >    -o smtpd_soft_error_limit=1001
> >    -o smtpd_hard_error_limit=1000
>
> I never understood why this 1001 exactly...

Because of the intricate interaction with the default value:
  smtpd_recipient_limit = 1000
and the handling of '452 Too many recipients'.
There was a discussion on this topic a year or so ago on the
Postfix mailing list. It took me some some to figure out the
smtpd_soft_error_limit must be above the smtpd_hard_error_limit,
otherwise it strikes too soon. I must admit I'd need to refresh
my memory on the exact sequence of events that we try to avoid here.
I think it all started with a case where some sites reduce the 
smtpd_recipient_limit to unreasonably low value.

  Mark


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to