On 02/25/2012 02:26 PM, Tonix (Antonio Nati) wrote:
It is per TCP session. It means when several messages are sent in
different message sessions but within a unique SMTP connection, limit is
global.
I planned to make it become per message session, but honestly in years
I've received no complains, so I'm uncertain if to make it.
I suggest to keep this tarpitting action only on public MX, disabling it
on server used for authenticated relaying.
Let me repeat again: public and relay servers must be different
(different IP or different ports), mainly because many email lients do
not handle error messages, so I enable chkuser on public MX, and disable
chkuser on authenticated relay servers, where users get back messages of
not existing (local) users from qmail.
Regards,
Tonino
Great, Tonino. Thanks for the clarification. I don't think I'd bother
with any coding changes at this point.
I agree with you that chkuser should be disabled on authenticated
connections.
Sam C (spamdyke author) has said that it is not possible for spamdyke to
reset the chkuser environment variable based on authentication:
"Environment variables can't be changed once the program is running.
That's why spamdyke can't turn RELAYCLIENT on/off as appropriate -- it
can't turn any other environment variables on/off either. qmail-smtpd
is started by spamdyke at the very beginning, so its environment is set
at that time and can't be altered based on authentication or anything else."
So the only option I see here is to disable chkuser for submissions by
setting up a separate tcp.smtp file. This is something that should be
included in the stock QMT package. We'll see about getting that done.
FWIW, there was some talk a couple years ago about spamdyke taking on
some of the filtering capabilities of chkuser. If and when that occurs,
I expect we'll eliminate the chkuser patch and simply let spamdyke
handle things.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
