IRedMail/FAQ/Enable.Throttling/RHEL.CentOS

From iRedMail

(Difference between revisions)
Jump to: navigation, search
m (Reverted edits by ZhangHuangbin (Talk) to last revision by Shake.chen)
Line 1: Line 1:
-
TO BE CONTINUED, DO NOT APPLY THEM.
 
-
 
iRedMail ships Policyd-1.8.x for sender & recipient throttling, but it's disabled by default. You can enable it by follow below steps on RHEL/CentOS:
iRedMail ships Policyd-1.8.x for sender & recipient throttling, but it's disabled by default. You can enable it by follow below steps on RHEL/CentOS:
-
* Enable throttling in '''/etc/postfix-policyd.conf''':
+
* Disable throttling in '''/etc/postfix-policyd.conf''':
{{cfg|/etc/policyd.conf|<pre>
{{cfg|/etc/policyd.conf|<pre>
 +
SENDERTHROTTLE=0
 +
SENDER_THROTTLE_SASL=0
 +
SENDER_THROTTLE_HOST=0
 +
 +
RECIPIENTTHROTTLE=0
 +
</pre>}}
 +
 +
* Enable throttling in '''/etc/postfix-policyd_sender_throttle.conf''':
 +
{{cfg|/etc/policyd_sender_throttle.conf|<pre>
SENDERTHROTTLE=1
SENDERTHROTTLE=1
SENDER_THROTTLE_SASL=1
SENDER_THROTTLE_SASL=1
-
SENDER_THROTTLE_HOST=0
+
SENDER_THROTTLE_HOST=1
RECIPIENTTHROTTLE=1
RECIPIENTTHROTTLE=1
</pre>}}
</pre>}}
-
Note: You may only enable '''SENDER_THROTTLE_SASL''' or '''SENDER_THROTTLE_HOST''' but '''NOT''' both.
+
* Edit '''/etc/init.d/postfix-policyd''', set '''ENABLE_SENDER_THROTTLE='YES'''' to start another policyd instance for throttling:
 +
{{cfg|/etc/init.d/policyd|<pre>
 +
ENABLE_SENDER_THROTTLE="YES"
 +
</pre>}}
* Restart policyd service:
* Restart policyd service:
Line 21: Line 31:
It will listen on two ports: 10031, 10032. You can verify it via command '''netstat''':
It will listen on two ports: 10031, 10032. You can verify it via command '''netstat''':
{{cmd|<pre>
{{cmd|<pre>
-
# netstat -ntlp | grep -i 10031
+
# netstat -ntlp | grep -i 1003
-
tcp        0      0 127.0.0.1:10031            0.0.0.0:*                  LISTEN      3454/policyd
+
tcp        0      0 127.0.0.1:10031            0.0.0.0:*                  LISTEN      3454/policyd       
 +
tcp        0      0 127.0.0.1:10032            0.0.0.0:*                  LISTEN      3459/policyd
</pre>}}
</pre>}}
* Enable throttling in Postfix '''/etc/postfix/main.cf''':
* Enable throttling in Postfix '''/etc/postfix/main.cf''':
{{cfg|/etc/postfix/main.cf|<pre>
{{cfg|/etc/postfix/main.cf|<pre>
-
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10031
+
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10032
</pre>}}
</pre>}}

Revision as of 07:53, 19 September 2010

iRedMail ships Policyd-1.8.x for sender & recipient throttling, but it's disabled by default. You can enable it by follow below steps on RHEL/CentOS:

  • Disable throttling in /etc/postfix-policyd.conf:
File: /etc/policyd.conf
SENDERTHROTTLE=0
SENDER_THROTTLE_SASL=0
SENDER_THROTTLE_HOST=0

RECIPIENTTHROTTLE=0
  • Enable throttling in /etc/postfix-policyd_sender_throttle.conf:
File: /etc/policyd_sender_throttle.conf
SENDERTHROTTLE=1
SENDER_THROTTLE_SASL=1
SENDER_THROTTLE_HOST=1

RECIPIENTTHROTTLE=1
  • Edit /etc/init.d/postfix-policyd, set ENABLE_SENDER_THROTTLE='YES' to start another policyd instance for throttling:
File: /etc/init.d/policyd
ENABLE_SENDER_THROTTLE="YES"
  • Restart policyd service:
Terminal:
# /etc/init.d/policyd restart

It will listen on two ports: 10031, 10032. You can verify it via command netstat:

Terminal:
# netstat -ntlp | grep -i 1003
tcp        0      0 127.0.0.1:10031             0.0.0.0:*                   LISTEN      3454/policyd        
tcp        0      0 127.0.0.1:10032             0.0.0.0:*                   LISTEN      3459/policyd
  • Enable throttling in Postfix /etc/postfix/main.cf:
File: /etc/postfix/main.cf
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10032

Restart postfix:

Terminal:
# /etc/init.d/postfix restart

That's all. Enjoy. :)

Personal tools