On 10/5/2011 2:20 PM, John Baker wrote: > We have been having some trouble with Temporary lookup failures from > ldap lookup timeouts and I have been trying to find ways to solve > the problem. One thing I would like to do is cut down on the volume > of lookups by skipping virtual alias lookups if the mail is being > relayed from another of our mail servers since it will already have > been done there. Is there a way to do this?
Configure the proxymap service on all your ldap lookups. That will dramatically reduce the number of connections, which usually is the real problem. http://www.postfix.org/proxymap.8.html and/or configure your relays to submit to a dedicated IP:port and set postfix to listen on that port with "-o receive_override_options=no_address_mapppings" http://www.postfix.org/postconf.5.html#receive_override_options Use your firewall to restrict access to only authorized relays. -- Noel Jones
