Henrik wrote:
> You really should use something like policyd-weight,
and greylisting (only
> for "dialup" like addresses, I hate to
delay mail for normal servers). That
> immediately reduces your load significantly..
> Cheers,
> Henrik
I also use and recommend policyd-weight. I set $REJECTLEVEL
= 4.24;
which is fairly conservative, but policyd-weight still
rejects 75% of
the mail that ends up getting rejected, with an overall
rejection rate
that varies between 65% and 85%. I have a secondary MX (not
round-robin) in place that acts primarily as a spam
rejection point.
I run policyd-weight, postgrey, and a couple RBLs on that
machine, and get
a 98% rejection rate. I only greylist for 50 seconds. The
few messages
that make it through get hit by amavisd-new using FuzzyOCR,
ImageInfo,
p0f, and the latest SA rules via sa-update. Having this
secondary MX in
place lessens the load on the primary MX by 40%. And yes, if
my
primary MX is down, legitimate mail will still make it
through the
secondary - but I like to be considerably more conservative
on the
primary.
Gary V
------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/
|