Do you only have 1 machine as your MX?
I have two MXes each running its own policyd.
Do you run Policyd on
the same server as your MySQL database?
Mysqld located on first MX.
How many concurrent smtpd processes do you have on your MX?
Up to 1.5k per MX in peak during bot attacks.
It appears as if
Policyd is only allowed to use 1024 concurrent connections,
please start Policyd up in DEBUG=3 mode and post the output
of the startup.
It's in attach.
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- DAEMON CONFIG ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: version> v1.81
Sep 7 12:47:02 imx postfix-policyd-greylist: config: debug> 3
Sep 7 12:47:02 imx postfix-policyd-greylist: config: daemon mode> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: bindhost> 127.0.0.1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: bindport> 10032
Sep 7 12:47:02 imx postfix-policyd-greylist: config: pidfile>
/var/run/policyd/policyd-greylist.pid
Sep 7 12:47:02 imx postfix-policyd-greylist: config: syslog> 22
Sep 7 12:47:02 imx postfix-policyd-greylist: config: chroot> /
Sep 7 12:47:02 imx postfix-policyd-greylist: config: uid> 301
Sep 7 12:47:02 imx postfix-policyd-greylist: config: gid> 301
Sep 7 12:47:02 imx postfix-policyd-greylist: config: conn acl> 127.0.0.0/8
172.16.0.0/16
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- DATABASE CONFIG ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: host> 172.16.0.6
Sep 7 12:47:02 imx postfix-policyd-greylist: config: user> policyd
Sep 7 12:47:02 imx postfix-policyd-greylist: config: pass>
Sep 7 12:47:02 imx postfix-policyd-greylist: config: database> policyd
Sep 7 12:47:02 imx postfix-policyd-greylist: config: options>
Sep 7 12:47:02 imx postfix-policyd-greylist: config: failsafe> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: keep alive> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: version> 50022
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- WHITELISTING ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: whitelisting> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: whitelistnullsender> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: whitelistsender> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: whitelistdnsname> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autowhitelisting> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autowhitelist_number> 500
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autowhitelist_netblock> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autowhitelist_expire>
5184000
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- BLACKLISTING ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: blacklisting> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: blacklisting_temp_reject>
1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: blacklisting_netblock> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: postfix_blacklist>
action=defer Policy violation. Blacklisted.
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autoblacklisting> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autoblacklist_number> 1000
Sep 7 12:47:02 imx postfix-policyd-greylist: config: autoblacklist_expire>
604800
Sep 7 12:47:02 imx postfix-policyd-greylist: config: blacklist_rejection>
action=defer Policy violation. Blacklisted.
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- HELO (HRP) ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: helo> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: helo_max_count> 10
Sep 7 12:47:02 imx postfix-policyd-greylist: config:
helo_blacklist_auto_expire> 5184000
Sep 7 12:47:02 imx postfix-policyd-greylist: config: helo_auto_expire> 172800
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- SPAMTRAP CONFIG ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: spamtrap> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: postfix_spamtrap>
action=reject Policy Rejection- Policy violation. Blacklisted.
Sep 7 12:47:02 imx postfix-policyd-greylist: config: spamtrapauto_expire>
604800
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- GREYLISTING CONFIG ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: greylisting> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: greylist_hostaddr> 4
Sep 7 12:47:02 imx postfix-policyd-greylist: config: postfix_greylist>
action=defer_if_reject Policy violation. Greylisting.
Sep 7 12:47:02 imx postfix-policyd-greylist: config: greylist_x_header> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: trainingmode> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: training_policyd_timeout> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: triplet timeout> 1800
Sep 7 12:47:02 imx postfix-policyd-greylist: config: optin/optout> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: optin all in> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: triplet auth timeout>
2592000
Sep 7 12:47:02 imx postfix-policyd-greylist: config: triplet unauth timeout>
172800
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- SENDER THROTTLE CONFIG ----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender throttle> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender throttle sasl> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender throttle host> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config:
postfix_sender_quota_exceeded> action=defer_if_permit Policy Rejection- Quota
Exceeded.
Sep 7 12:47:02 imx postfix-policyd-greylist: config:
quota_exceeded_temp_reject> 1
Sep 7 12:47:02 imx postfix-policyd-greylist: config: postfix_bad_size>
action=reject Policy Rejection- Message size too big.
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender msglimit> 512
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender quotalimit>
250000000
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender timelimit> 3600
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender msgsize> 10240000
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender expire inactive>
2678400
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender throttle
autoblacklisting> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender throttle
autoblacklist number> 3
Sep 7 12:47:02 imx postfix-policyd-greylist: config: sender throttle
autoblacklist expire> 21600
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: ---- RECIPIENT THROTTLE CONFIG
----
Sep 7 12:47:02 imx postfix-policyd-greylist: config: recipient throttle> 0
Sep 7 12:47:02 imx postfix-policyd-greylist: config: recipient msglimit> 64
Sep 7 12:47:02 imx postfix-policyd-greylist: config: recipient timelimit> 3600
Sep 7 12:47:02 imx postfix-policyd-greylist: config: recipient expire
inactive> 2678400
Sep 7 12:47:02 imx postfix-policyd-greylist: config:
postfix_recipient_quota_exceeded> action=defer_if_permit Policy Rejection-
Quota Exceeded.
Sep 7 12:47:02 imx postfix-policyd-greylist: config:
quota_exceeded_temp_reject> 1
Sep 7 12:47:02 imx postfix-policyd-greylist:
Sep 7 12:47:02 imx postfix-policyd-greylist: starting policyd v1.81
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd: 0: rlimit: max: 4097
cur: 4097
Sep 7 12:47:02 imx postfix-policyd-greylist: connecting to mysql database:
172.16.0.6
Sep 7 12:47:02 imx postfix-policyd-greylist: connected..
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: saved fd: numi = 0, connfd
= 11
Sep 7 12:47:02 imx postfix-policyd-greylist: connection from: 127.0.0.1 port:
58929 slots: 0 of 4096 used
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd: 11 select(): fd 11 is
ready for read
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd 11: w_read: returning
-2 after reading 310 bytes
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd: 11
policy_array[11][0]:request=smtpd_access_policy
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd: 11
policy_array[11][1]:protocol_state=data
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd: 11
policy_array[11][2]:protocol_name=esmtp
Sep 7 12:47:02 imx postfix-policyd-greylist: DEBUG: fd: 11
policy_array[11][3]:client_address=77.246.144.131
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users
