List Info

Thread: Re: amavisd crashes




Re: amavisd crashes
country flaguser name
United States
2007-11-14 11:35:47
Actually, you did the opposite of what you wanted to do.  By
default, postfix's maximum processes for smtp and smtpd is
100 each.  By hard-coding 50, you cut what's potentially
available in half.

-- 
Rick Zeman
Manager of Information Technology
Melwood Horticultural Training Center
301.599.4574 - HelpDesk
301.599.4560 - MyDesk
http://www.melwood.org 

>>> David Sims <dpsimsdpsims.com> 11/14/2007
12:13 PM >>>
Hi Mark,

  Are you doing any kind of mail rejection at the level of
SMTP (rbl,
etc)? If so, then you first need an adequate number of SMTP
listeners
(postfix -> master.cf). I use 50 as this is not a
resource intensive
activity:

smtp      inet  n       -       n       -       50       
smtpd

Then, you will need to optimise amavis to accept as many
simultaneous mail
streams as your resources allow... I use 2, but YMMV....
Spamassassin is
fairly resource intensive and the number of amavis processes
that you
allow is directly related to the number of simultaneous
instances of
spamassassin.

This way, if you are rejecting calls at the SMTP level based
on unknown
upstream user or rbl or some other mechanism, there will be
plenty of SMTP
listeners to deal with this, reducing the quantity of mail
to be scanned
by SpamAssassin. Some people have said that there is little
throughput
gain from amavis processeses more than two, but I haven't
experimented
with it too much....

This is how I reject blatently bogus mail at the SMTP level:

In postfix -> main.cf:

smtpd_client_restrictions = reject_rbl_client
dul.dnsbl.sorbs.net,
reject_rbl_client sbl.spamhaus.org, reject_rbl_client
relays.ordb.org,
reject_rbl_client list.dsbl.org

smtpd_sender_restrictions = check_sender_access
hash:/etc/postfix/sender_
access, reject_non_fqdn_sender, reject_unknown_sender_domain

smtpd_recipient_restrictions = permit_mynetworks,
reject_unauth_
destination, reject_unauth_pipelining,
reject_unknown_recipient_domain,
reject_unverified_recipient

unverified_recipient_reject_code = 550

Also, the line in postfix -> master.cf:

smtp-amavis     unix    -       -       -       -       4   
  smtp

should match in amavisd.conf:

$max_servers = 4;

If any other admins see an error in my methodology or
config, please feel
free to pipe up. I'm always ready to benefit from the
experience of
others. 

Dave Sims
************************************************************
*************
On Wed, 14 Nov 2007, Mark Olbert wrote:

> Recently I’ve had amavisd die on several occasions,
which has backed up a ton of email (fortunately most of it
spam ☺) into the queue.
> Searching the archives indicated that one solution
might be to up the max number of servers. I did this in
amavisd.conf (I'm now up to 8).
> But one post indicated I also need to change the max
processes setting in my postfix master.cf file. I'm not sure
which parameter this is.
> Is it the -o max_use argument on the smtp-amavis
section I added at the end of master.cf when I set up maia?
If not, where/what is it?
>
> - Mark
>
>
_______________________________________________Maia-users
mailing listMaia-usersrenaissoft.comhttp://www.renaissoft.com/mailman/listinfo/maia-users 
>
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com 
http://www.renaissoft.com/mailman/listinfo/maia-users

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users
[1]

about | contact  Other archives ( Real Estate discussion Medical topics )