Re: postfix smtp relay - prodleva 8 sekund

Výchozí konfigurace postfix 3.4.8, Arch Linux.
Blacklists/Whitelists jsem nedefinoval.

Webový klient odesílá poštu z adresy 172.17.30.4 (i tam je
timeout 8 sec).

#main.cf

compatibility_level = 2 queue_directory = /var/spool/postfix
command_directory = /usr/bin daemon_directory =
/usr/lib/postfix/bin data_directory = /var/lib/postfix
mail_owner = postfix myhostname = XXX.XXX.net mydomain =
XXX.net myorigin = $mydomain smtp_generic_maps =
hash:/etc/postfix/mk_sender_generic_map inet_interfaces =
all mydestination = $myhostname, localhost.$mydomain,
localhost unknown_local_recipient_reject_code = 550
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
172.17.30.4 alias_maps = hash:/etc/postfix/aliases
alias_database = $alias_maps debug_peer_level = 1
#debug_peer_list = 172.17.30.4 debugger_command = <>
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin <> ddd
$daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/bin/sendmail newaliases_path =
/usr/bin/newaliases mailq_path = /usr/bin/mailq setgid_group
= postdrop html_directory = no manpage_directory =
/usr/share/man sample_directory = /etc/postfix
readme_directory = /usr/share/doc/postfix inet_protocols =
ipv4 meta_directory = /etc/postfix shlib_directory =
/usr/lib/postfix
smtpd_tls_cert_file=/etc/letsencrypt/live/XXX.XXX.net/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/XXX.XXX.net/privkey.pem
smtpd_tls_session_cache_database =
btree:${data_directory}/smtpd_scache
smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4,
MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CBC3-SHA,
KRB5-DES, CBC3-SHA smtpd_tls_dh1024_param_file =
${config_directory}/mk_dhparams.pem smtp_tls_security_level
= encrypt smtp_tls_ciphers = high # or "export" to "medium"
or "low" smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_policy_maps = hash:/etc/postfix/mk_smtp_tls_policy
smtp_tls_session_cache_database =
btree:${data_directory}/smtp_scache smtp_tls_CAfile =
/etc/ssl/certs/ca-certificates.crt

smtp_sender_dependent_authentication = yes
sender_dependent_relayhost_maps =
hash:/etc/postfix/mk_sender_relayhost_map
smtp_sasl_auth_enable = yes sender_dependent_relayhost_maps
= hash:/etc/postfix/mk_sender_relayhost_map
smtp_sasl_password_maps = hash:/etc/postfix/mk_sasl_passwd

smtp_sasl_security_options = noanonymous
smtpd_peername_lookup = no

# master.cf

#
==========================================================================
# service type private unpriv chroot wakeup maxproc command
+ args # (yes) (yes) (no) (never) (100) #
==========================================================================
#smtp inet n - n - - smtpd #smtp inet n - n - 1 postscreen
#smtpd pass - - n - - smtpd #dnsblog unix - - n - 0 dnsblog
#tlsproxy unix - - n - 0 tlsproxy submission inet n - n - -
smtpd -o smtpd_tls_security_level=encrypt -o
smtpd_sasl_auth_enable=yes -o smtpd_tls_auth_only=yes -o
smtpd_sasl_type=dovecot -o smtpd_sasl_path=private/auth -o
smtpd_sasl_security_options=noanonymous -o
smtpd_sasl_local_domain=$myhostname -o
smtpd_client_restrictions=permit_sasl_authenticated,reject
-o
smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject

Přidání

smtpd_peername_lookup = no

 do main.cf vypne reverse lookup a je po timeoutu...

Zobrazit: http://www.abclinuxu.cz/poradna/linux/show/452106#11