Re: Best defense against this?

7 msg	Postfix 2.2.5 on latest Solaris 9 x86
5 msg	Postfix Relay, and Pop-before-smtp
12 msg	Newb Question

Best defense against this?
\ Justin Piszcz (23 Sep 2007)
. \ Ralf Hildebrandt (23 Sep 2007)
. . \ Justin Piszcz (23 Sep 2007)
. . . \ Ralf Hildebrandt (23 Sep 2007)
. . . . \ Justin Piszcz (23 Sep 2007)
. \ Marcel de Reuver (23 Sep 2007)
. . \ Glenn Matthys - OpenGate (23 Sep 2007)
. . . \ Justin Piszcz (23 Sep 2007)
. . . . \ mouss (23 Sep 2007)
. \ Felix J. Ogris (23 Sep 2007)
. \ Marcel de Reuver (23 Sep 2007)
. . \ Tony Earnshaw (23 Sep 2007)
. . . \ Victor Duchovni (23 Sep 2007)

1 msg	undelivered mail problem - SOLVED
4 msg	Legal local-part
3 msg	virtual_alias_domains with mysql: 'User unknown...
6 msg	Submission port (587): howto to use differente ...
5 msg	When does smtpd_reject_unlisted_recipient kick in?
4 msg	Postfix 'falling back' on sasldb? I don't want ...
3 msg	Nested access maps (I think ;))
3 msg	Suppression of encoding bad header function in ...
4 msg	RE: Catchall ??
3 msg	problem with .forward files + forwarding loops
5 msg	Postfix Strange Behaviours
7 msg	Content filter question, based upon auth'ed or not
28 msg	Mail stuck in active queue for loooong time
11 msg	How to stop a user from changing the 'From:' he...
10 msg	[Semi-OT] blocked port 465, anywhere?
7 msg	chroot problems on Nexenta (OpenSolaris)

Subject:	Re: Best defense against this?
Group:	Postfix-users
From:	Victor Duchovni
Date:	23 Sep 2007

On Sun, Sep 23, 2007 at 06:50:02PM +0200, Tony Earnshaw wrote:

> Marcel de Reuver skrev, on 23-09-2007 15:05:
>
> [...]
>
> >When you Google for "broken path MTU discovery" you can get some
> >background via: http://www.netheaven.com/pmtu.html
>
> MTU path discovery is for stuff going out, not stuff coming in.

Not strictly true, while SMTP server responses to the client tend to
be short enough to avoid MTU issues, this is not always the case. For
example, TLS handshake packets can be large (given large certificates,
large lists of acceptable CA DNs for client cert requests, ...).

--
Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomo?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.