Rate limiting with anvil

2009-11-25 Thread Daniel Ryslink
Hello, I am trying to set rate limits on our smtp relays to prevent abusive (compromised) user hosts from flooding the service with fast, intensive mail floods. I have used the following directives (I can post whole main.cf, but I don't think it's necessary): smtpd_recipient_limit =

Re: Rate limiting with anvil

2009-11-25 Thread Wietse Venema
Daniel Ryslink: Hello, I am trying to set rate limits on our smtp relays to prevent abusive (compromised) user hosts from flooding the service with fast, intensive mail floods. I have used the following directives (I can post whole main.cf, but I don't think it's necessary):

Re: Rate limiting with anvil

2009-11-25 Thread Daniel Ryslink
Thank you for answering, here is the requested information: According to the instructions in the mailing list welcome message, send postconf -n output instead of cut-and-paste. alias_database = hash:/etc/mail/aliases alias_maps = hash:/etc/mail/aliases allow_min_user = yes allow_percent_hack

Re: Rate limiting with anvil

2009-11-25 Thread Wietse Venema
By default, Postfix will exclude clients in mynetworks from smtpd_client_mumble_limits. You may want to specify a separate list for mynetworks (relay control) and for anvil (rate control). http://www.postfix.org/postconf.5.html#smtpd_client_event_limit_exceptions (with Postfix 2.1, this was

Re: Rate limiting with anvil

2009-11-25 Thread Victor Duchovni
On Wed, Nov 25, 2009 at 01:20:45PM +0100, Daniel Ryslink wrote: anvil_rate_time_unit = 300 mynetworks = $config_directory/our_network_blocks What is in this file? smtpd_client_connection_rate_limit = 30 smtpd_client_message_rate_limit = 100 smtpd_client_recipient_rate_limit = 60 These

Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Hi everyone, I had a problem with rate limiting in postfix in last week, and I had to disable it. I don't know why but I set up rate limiting per IP and it looks like it didn't count rates correctly. Let me shed a lit a bit for my problem. My company decided to limit a number of messages per day

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Stefan Förster
* Jaroslaw Grzabel ja...@meil.me: I had a problem with rate limiting in postfix in last week, and I had to disable it. I don't know why but I set up rate limiting per IP and it looks like it didn't count rates correctly. Let me shed a lit a bit for my problem. My company decided to limit a

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Wietse Venema
Jaroslaw Grzabel: My company decided to limit a number of messages per day per IP. That's why we run anvil and limit 1000msg/24h/IP, so I put into main.cf: Don't use anvil(8) for long-term statistics. ANVIL(8) ANVIL(8) ... The

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Hi, Wietse Venema wrote: Instead, use a policy daemon with persistent database. As far as I remember I tried once http://www.policyd.org, but it didn't work for me. As I remember there was a problem with message accounting, and I have got an email from Nigel from policyd where he confirmed

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Noel Jones
Jaroslaw Grzabel wrote: Hi, Wietse Venema wrote: Instead, use a policy daemon with persistent database. As far as I remember I tried once http://www.policyd.org, but it didn't work for me. As I remember there was a problem with message accounting, ... Or maybe you have different policy

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Ing. Davy Leon
Wich policy daemon would you guys recommend to install? I have a Postfix 2.3.3 with amavisd-new and clamav running. Cheers David

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Eduardo Júnior
Hi, On Wed, Aug 5, 2009 at 1:33 PM, Ing. Davy Leond...@scu.escambray.com.cu wrote: Wich policy daemon would you guys recommend to install? I have a Postfix 2.3.3 with amavisd-new and clamav running. Cheers David I use postfwd [1] for that And it works well for me. To build the rules is

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Eduardo Júnior
Hi, 2009/8/5 Eduardo Júnior ihtrau...@gmail.com: Hi, On Wed, Aug 5, 2009 at 1:33 PM, Ing. Davy Leond...@scu.escambray.com.cu wrote: Wich policy daemon would you guys recommend to install? I have a Postfix 2.3.3 with amavisd-new and clamav running. Cheers David I use postfwd [1]

Re: Understanding rate limiting with anvil.

2009-08-05 Thread Jaroslaw Grzabel
Eduardo Júnior wrote: Hi, Hi, just a detail: With postfwd, i didn't get control how many messages a IP can to send. But my control have done through number of connections from host. If you consider that a connection is equal a message, this is ok. That may be a big