Milter-greylist

Quoting Emmanuel Dreyfus <manu@...>:

> On Tue, Aug 03, 2004 at 11:19:30AM +0200, milter@... wrote:
> > milter-greylist seems mature but I'm wondering about scalibility.
> > I'm thinking about deploying it for some 10.000/20.000 existing
> > email addresses (4 SMTP mail-gateways).
> > Will milter-greylist work in such a context ?
>
> The question is not about the number of addresses, but about the number
> of messages.

=> sma mentions 20.000/30.000 messages on normal days on one mail-gateway.

> > I'm worried about memory needed/usage and performances ...
>
> You need the memory to hold the whole greylist database. I had a good
> idea of the memory used before the IPv6 patch. Now, the p_addr field
> in struct pending is holding some space I have trouble to evaluate.
>
> Apart from that, each message eats 92 bytes.
=> I'm already using MIMEDefang + SA + antivirus software on these
platforms (40-50Megs per mimedefang.pl process).
So Milter-greylist will not take a lot of additional memory except in
case of harvesting attacks I guess.

> The only real performance problem we have is when we dump the database.
> If it gets really big it could take some time to flush it to disk, but
> you can do it every 10 minutes if you want.
=> I hope to not face 2Gbytes limit in some cases ...
With DOSers and spammers around ...

> > At first before consider setting-up milter-greylist I'm trying to identify
> known
> > partners/mailing-list mailservers to whitelist to avoid
> > delays with important messages.
> > No performance problem with using a hundred "domain" statements ?
>
> No, it should be okay. There is no DNS lookup caused by theses statements.
> You only pay the longer walk in the chained list, but for 100 items, it's
> still very cheap.
=> Great ! I'm starting to get the info from log analysis tools (sma +
perl scripts).


> It eats memory, but that should be okay too.
=> Thanks . So I can safely set-up version 1.4 I guess and synchronise the
database between the 4 mail-gateways.
To start smoothly how about using "-w 10"? Won't 10 minutes be enough ?

Thks,

SL/