Re: Normal mode of operation? - Clarifying on 2nd Try.j

On Monday 11 August 2003 7:47 pm, Steve G wrote:
> Hello,
>
> Are you nat'ed? Since you are using a test address range
> rather than a public internet address, you should be able
> to give yourself another address. Changing the nat to point
> to the new address would be the least impact on people.
>

Yes, I'm setting in a 'DMZ' subnet and nat'ed. That's a good idea. I could 
alias another address on the email server, direct the traffic at the 
firewall, use the 'bind' directive in xinetd to assign services on the two 
interfaces, and use one for public with no relaying and the other for private 
with relaying.

There is a lot of anti-spam processing going on in this box. I want to use 
xinetd to limit the input connections/second to a level that will ensure that 
queued/delivery mail processing has time to complete and does not get 
over-whelmed by the incoming messages. The typical per message processing 
time is 3-to-10 seconds, so I'm not worried about any super-server latencies 
which will be relatively insignificant. But I am worried about the number of 
running processes getting too high if the incoming connection rate becomes 
too great.

-Tony