Re: verify parameters - ReadList.com

10 msg	header check question

verify parameters
\ egoitz (9 May 2008)
. \ Matthias Haegele (9 May 2008)
. \ (Wietse Venema) (9 May 2008)
. . \ egoitz (9 May 2008)
. \ egoitz (9 May 2008)
. . \ (Wietse Venema) (9 May 2008)
. . . \ egoitz (10 May 2008)
. . . . \ (Wietse Venema) (10 May 2008)
. . . . . \ Terry Carmen (10 May 2008)
. . . . . \ egoitz (11 May 2008)
. . . . . . \ egoitz (11 May 2008)
. . . . . . \ (Wietse Venema) (11 May 2008)

4 msg	Configure postfix in big env
2 msg	envelope sender '<>' via uucp gets rewrit...
2 msg	Spam filtering only for specific email accounts
3 msg	Postfix 2.4 to 2.5: smtp(d)_tls_session_cache_d...
15 msg	Question about 'standards' WRT BATV and SAV
7 msg	my solution to fight backscatter email
2 msg	AUTO: Joe Grastara is out of the office (return...
12 msg	Q about sender_dependent_relayhost_maps inbound...
16 msg	Milter Suggestions
9 msg	Transport table and postmap
3 msg	Archiving e-mail?
8 msg	Error 550: unable to relay
1 msg	FW: new subject
13 msg	TLS handshake error
6 msg	Seperating SMTP and POP/IMAP services
3 msg	Test 2
1 msg	Testing
12 msg	[Fwd: ldap users & aliases config]

Subject:	Re: verify parameters
Group:	Postfix-users
From:	(Wietse Venema)
Date:	11 May 2008

egoitz:
> > In the case of Postfix,
> >
> > - Refresh means you don't have to wait until the probe completes.
> >
> > - Expire means you know nothing until the probe completes.
>
> > If you want to learn how cache algorithms work, The Postfix list
> > is not the right forum.
>
> No, no Wietse I just want to make reject_unverfied_recipient to work for
> avoid spamming the world when spammers send mail to one of my domains and
> the user doesn't exist. There are various ISP in wich they accept all mail
> and later bounce it... I don't like this solution... that's all really, I
> don't want you to teach me something that I should learn by myself or
> something like that, really mates. I'm just worried about spam, and can't
> get a list of valid recipients from my customers, it's totally impossible
> I tried it...

You totally botched it by mis-configuring the expire and refresh
timerswith settings of minutes.

To make this work

- you MUST use a persistent address verification database.

- you MUST use a positive expire time of days if not weeks.

- you MUST use a positive refresh time that is not small compared
to the positive expire time.

- you MUST use a short negative expire time of at least an hour.

- you MUST use a negative expire time that is not small compared
to the negative expire time.

In other words, use the defaults until you understand how things
work.

Wietse