On Mon, Dec 29, 2008 at 06:54:52PM +0100, Alexander Wirt wrote: > > Using amavisd-milter is much better option, you can control concurrent > > process amount and socket queue. No limiting then needed for postfix > > processes, you can do do cheap rejects before amavisd (unknown users, > > helo/rbl etc). > > > > Of course you do have to know something about your average traffic and > > hardware limits. But nothing wrong about running pre-queue scanning. > > Sure. But about doing full bloated SA and Virusscanning in pre-queue. You can > do wonderful denial of service attacks with such mail systems :).
What do you think happens when after-queue scanner is flooded with millions of DoS mails? It will start crawling just the same. Only difference is where your mail is jammed, your disk or sending mail servers. :):) > Do cheap things at pre-queue time (header checks, helo...) and the bloated, > expensive things after queue. Only if you are seriously underpowered. ------------------------------------------------------------------------------ _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
