From: Beast <be...@i6...> - 2005-05-12 08:43:26
|
Hello, I run sqlgrey along with postfix on test environment (v1.5.5). Time between "rcpt to" command and "450: grey listed for 1 minute" is 17 seconds, is this normal? Database is mysql 4.1.7 and only contains 8 rows, in postfix I did not use rbl yet. -- --beast |
From: Lionel B. <lio...@bo...> - 2005-05-12 15:03:11
|
Beast wrote the following on 12.05.2005 10:42 : > > Hello, > > I run sqlgrey along with postfix on test environment (v1.5.5). > Time between "rcpt to" command and "450: grey listed for 1 minute" is > 17 seconds, is this normal? No, this is far from what is expected (should be always under the second and more in the 0.01 to 0.1 range). Especially with 1.5.x which is tuned for large workloads. > > Database is mysql 4.1.7 and only contains 8 rows, In which table ? SQLgrey uses a connect table for unknown clients and then (if the clients reconnect) populates the from_awl and domain_awl tables. To rule out any problem with the database itself, how much time does it take to do a "SELECT count(DISTINCT sender_domain) FROM connect;" for example ? Lionel. |
From: Beast <be...@i6...> - 2005-05-13 08:36:01
|
Lionel Bouton wrote: > Beast wrote the following on 12.05.2005 10:42 : > > >>Hello, >> >>I run sqlgrey along with postfix on test environment (v1.5.5). >>Time between "rcpt to" command and "450: grey listed for 1 minute" is >>17 seconds, is this normal? > > > > No, this is far from what is expected (should be always under the second > and more in the 0.01 to 0.1 range). Especially with 1.5.x which is tuned > for large workloads. > > >>Database is mysql 4.1.7 and only contains 8 rows, > > > > In which table ? SQLgrey uses a connect table for unknown clients and > then (if the clients reconnect) populates the from_awl and domain_awl > tables. > In connect table, other less than 6 entries. > To rule out any problem with the database itself, how much time does it > take to do a "SELECT count(DISTINCT sender_domain) FROM connect;" for > example ? > mysql> SELECT count(DISTINCT sender_domain) FROM connect; +-------------------------------+ | count(DISTINCT sender_domain) | +-------------------------------+ | 6 | +-------------------------------+ 1 row in set (0.05 sec) -- --beast |
From: Lionel B. <lio...@bo...> - 2005-05-13 09:02:28
|
Beast wrote the following on 13.05.2005 10:35 : > Lionel Bouton wrote: > >> >> In which table ? SQLgrey uses a connect table for unknown clients and >> then (if the clients reconnect) populates the from_awl and domain_awl >> tables. >> > > In connect table, other less than 6 entries. > >> To rule out any problem with the database itself, how much time does it >> take to do a "SELECT count(DISTINCT sender_domain) FROM connect;" for >> example ? >> > mysql> SELECT count(DISTINCT sender_domain) FROM connect; > +-------------------------------+ > | count(DISTINCT sender_domain) | > +-------------------------------+ > | 6 | > +-------------------------------+ > 1 row in set (0.05 sec) > > This is normal. Could you post the output of 'postconf -n'? As SQLgrey's only time consuming operations are SQL queries, I suspect something other in your Postfix configuration is causing this. If you take SQLgrey out of the loop is the answer from Postfix after "RCPT TO:" noticeably quicker ? Lionel |
From: Beast <be...@i6...> - 2005-05-13 09:17:41
|
Lionel Bouton wrote: > > > This is normal. Could you post the output of 'postconf -n'? As SQLgrey's > only time consuming operations are SQL queries, I suspect something > other in your Postfix configuration is causing this. If you take SQLgrey > out of the loop is the answer from Postfix after "RCPT TO:" noticeably > quicker ? > This is related config in main.cf smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_mynetworks, reject_unauth_destination, reject_unknown_recipient_domain, check_sender_access hash:/etc/postfix/sender_access, check_client_access hash:/etc/postfix/client_access, # reject_rbl_client relays.ordb.org, # reject_rbl_client sbl.spamhaus.org, # reject_rbl_client bl.spamcop.net, # reject_rbl_client sbl-xbl.spamhaus.org, # reject_rbl_client opm.blitzed.org, # reject_rbl_client list.dsbl.org, # reject_rbl_client dul.dnsbl.sorbs.net, ### sqlgrey check_policy_service inet:127.0.0.1:2501 permit If I comment check_policy_service, then the response is quicker (arround 1 sec, with sqlgrey _always_ 15-20 sec). -- --beast |
From: Lionel B. <lio...@bo...> - 2005-05-13 12:05:41
|
Beast wrote the following on 13.05.2005 11:17 : > > > If I comment check_policy_service, then the response is quicker > (arround 1 sec, with sqlgrey _always_ 15-20 sec). Could you set the log level to debug : loglevel = 4 in /etc/sqlgrey/sqlgrey.conf, send a couple of mails to your server and send me the logs (postfix+sqlgrey) ? Lionel |
From: Beast <be...@i6...> - 2005-05-20 03:34:17
|
Lionel Bouton wrote: > Beast wrote the following on 13.05.2005 11:17 : > > >> >>If I comment check_policy_service, then the response is quicker >>(arround 1 sec, with sqlgrey _always_ 15-20 sec). > > > > Could you set the log level to debug : > loglevel = 4 > in /etc/sqlgrey/sqlgrey.conf, send a couple of mails to your server and > send me the logs (postfix+sqlgrey) ? > Sorry for the delay, I was on leave. Unfortunately, the test machine has already formated, rebuild everything solves the problem. Thanks. -- --beast |
From: Michel B. <mi...@bo...> - 2005-05-13 11:55:57
|
Le Vendredi 13 Mai 2005 11:02, Lionel Bouton a =E9crit : > > Could you post the output of 'postconf -n'? As SQLgrey's > only time consuming operations are SQL queries, I suspect something > other in your Postfix configuration is causing this. If you take SQLgre= y > out of the loop is the answer from Postfix after "RCPT TO:" noticeably > quicker ? I strongly suspect a DNS problem. He should check his resolv.conf is OK, = and=20 that his machine name can resolve forward and reverse in DNS. --=20 Michel Bouissou <mi...@bo...> OpenPGP ID 0xDDE8AC6E |
From: Lionel B. <lio...@bo...> - 2005-05-13 12:06:55
|
Michel Bouissou wrote the following on 13.05.2005 13:55 : >Le Vendredi 13 Mai 2005 11:02, Lionel Bouton a =E9crit : > =20 > >>Could you post the output of 'postconf -n'? As SQLgrey's >>only time consuming operations are SQL queries, I suspect something >>other in your Postfix configuration is causing this. If you take SQLgre= y >>out of the loop is the answer from Postfix after "RCPT TO:" noticeably >>quicker ? >> =20 >> > >I strongly suspect a DNS problem. He should check his resolv.conf is OK,= and=20 >that his machine name can resolve forward and reverse in DNS. > > =20 > This was my first assumption too, but the policy service is accessed by IP and deactivating it solves the problem. Lionel. |