Qmail Support Forum

Aecio F. Neto · Guest

I wonder if it is possible to have more than one tcp rule defined for tcpserver this way:

I have a huge tcp.smtp rule that I would like to compile into cdb just once and have it for tcpserver as primary rule set.
connections not catch by this primary set would invoke checking on a secondary list that is dinamically generated.

So, I would have something like this:

tcpserver -x tcp.smtp.primary -x tcp.smtp.dinamically

Possible the way it is or needs to patch it?

Adrian Ho · Guest

How large is the static rule set? Even with a million records:

cat static.rule.set dynamic.rule.set | tcprules smtp.cdb smtp.tmp

every time dynamic.rule.set changes shouldn't be a pain.

In fact, I did a quick test myself of 1,040,400 records:

127.{1..16}.{1..255}.{1..255}:allow,RELAYCLIENT=""

Generating this ruleset with a triply-nested bash for-loop took 45 secs
on a P4/2.4G 512MB. tcprules crunched it in 2 secs. 'Nuff said.

Aecio F. Neto · Guest

Well, up to now it is...
Primary tcp.smtp has over 100Mb and more than 1M entries.

This dynamic rule set can be generate each second, due to client authentication.
I now this is not best way to handle this, but that's the way it is setup now and changing it to smtp auth right now is not feasible.

I had already tried it and cat operation takes about 12 secs in our production box. So, this is out of question.

> In fact, I did a quick test myself of 1,040,400 records:
>
> 127.{1..16}.{1..255}.{1..255}:allow,RELAYCLIENT=""
>
> Generating this ruleset with a triply-nested bash for-loop took 45 secs
> on a P4/2.4G 512MB. tcprules crunched it in 2 secs. 'Nuff said.

Right, as soon as cdb is created it takes "almost nothing" to load ~100Mb file.

Said that, I *really* need tcpserver to load 2 cdbs... I have to patch it, right?

Richard Lyons · Guest

If you don't want to patch, qmail-banner can be used for this. If
you don't want/need the banners, don't define BANNER{FILE,*SLEEP,}.

tcpserver -x tcp.smtp.primary ... 0 smtp \
qmail-banner -x tcp.smtp.dinamically -x other.cdb \
rblsmtpd qmail-smtpd

http://test.frob.com.au/qmail/filters/qmail-banner/
http://test.frob.com.au/qmail/filters/man/qmail-banner.1.html

Rick.