Re: [SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-29 Thread Mark Alan
On Sun, 29 Jul 2012 00:33:49 +0200, Reindl Harald h.rei...@thelounge.net wrote: Am 28.07.2012 20:03, schrieb Mark Alan: The solution is to exempt traffic sent from the machine from the rate controls. In 2012, in a server facing the net and running other services besides mail, I would

Re: [SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-29 Thread Reindl Harald
Am 29.07.2012 11:48, schrieb Mark Alan: if you do not trust you OUTGOING traffic the only valid reason is that you doubt your machine is comprimised [The problem, as said in another email, is (mostly) solved] - I do not trust anything connected 24h to the Internet then shut it down do

[SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-28 Thread Mark Alan
On Sat, 28 Jul 2012 14:42:59 +, Viktor Dukhovni postfix-us...@dukhovni.org wrote: On Sat, Jul 28, 2012 at 09:10:34AM -0400, Wietse Venema wrote: Thus, VERP increases the number of parallel connections. This may result in overflow of state tables in under-powered stateful routers,

Re: [SOLVED] Postfix 2.9.x vs iptables 1.4.x interaction issues under Debian/Ubuntu

2012-07-28 Thread Reindl Harald
Am 28.07.2012 20:03, schrieb Mark Alan: The solution is to exempt traffic sent from the machine from the rate controls. In 2012, in a server facing the net and running other services besides mail, I would not call it a safe bet. In the event (that must be accounted for) of an intrusion,