Page 2 of 2 FirstFirst 12
Results 11 to 14 of 14

Thread: Per user throttle/rate-limit?

  1. #11
    Join Date
    Jan 2009
    Location
    Fresno
    Posts
    31
    Rep Power
    6

    Default

    Is policyd officially supported for NE customers?
    Bug 8791 – make support for postfix-policyd easier

  2. #12
    Join Date
    Apr 2009
    Posts
    93
    Rep Power
    6

    Default

    I don't believe it is. I had to install it manually following the user-submitted wiki article linked in that bug.

  3. #13
    Join Date
    Apr 2009
    Posts
    93
    Rep Power
    6

    Default

    I've made a little progress. I can get zimbra to at least connect to policyd now. I believe i've broken away from proper config through.


    in postfix_recipient_restrictions.cf, i've changed:

    %%contains VAR:zimbraMtaRestriction check_policy_service inet:ipofpolicydserver:10031%%

    to
    check_policy_service inet:ipofpolicydserver:10031

    EDIT:
    I also had to add:
    smtpd_end_of_data_restrictions = check_policy_service inet:ipoppolicydserver:10031
    to /opt/zimbra/postfix/conf/main.cf

    Which is how its done in vanilla postfix (as i just tested it with vanilla postfx, for troubleshooting).

    It connects to policyd now, i just need to figure out my policies. At least its making the conenction however.

    So, is it kosher to leave it like this? Or am i going to have issues later?
    Why did the "correct" way of doing it fail?

    Thanks!
    Last edited by NathanL; 02-18-2010 at 10:29 AM.

  4. #14
    Join Date
    May 2007
    Posts
    63
    Rep Power
    8

    Default

    Quote Originally Posted by NathanL View Post
    I've made a little progress. I can get zimbra to at least connect to policyd now. I believe i've broken away from proper config through.


    in postfix_recipient_restrictions.cf, i've changed:

    %%contains VAR:zimbraMtaRestriction check_policy_service inet:ipofpolicydserver:10031%%

    to
    check_policy_service inet:ipofpolicydserver:10031

    EDIT:
    I also had to add:
    smtpd_end_of_data_restrictions = check_policy_service inet:ipoppolicydserver:10031
    to /opt/zimbra/postfix/conf/main.cf

    Which is how its done in vanilla postfix (as i just tested it with vanilla postfx, for troubleshooting).

    It connects to policyd now, i just need to figure out my policies. At least its making the conenction however.

    So, is it kosher to leave it like this? Or am i going to have issues later?
    Why did the "correct" way of doing it fail?

    Thanks!
    I'm installing this now for rate limiting (policyD quotas), your problem is that postfix rules are interpreted in order in postfix_recipient_restrictions.cf, so if it matches your other rules it never gets to policyD there.

    I think the WIKI is really innapropriate for what people are looking for from policyd, especially in the case of rate limiting.

    The entry should be made in a different area specifically as you have found, and postfix advises.

    smtpd_end_of_data_restrictions = check_policy_service inet:ipoppolicydserver:10031

    This allows it to check all emails to see if they match the policyd rules, and you can put exceptions for specific IP's into PolicyD's rulesets. Otherwise you have to move the check_policy up front into the postfix_recipient_restrictions, and it's nearly impossible to get it to work appropriately.

    Personally I think Zimbra should look at implementing at least the quotas part as standard functionality, and allow it to be set in COS, it should be trivial to implement and is a standard feature in other Enterprise type mail servers which is the playground Zimbra wants to be in.
    Last edited by drwho18; 09-25-2010 at 01:05 PM.

Similar Threads

  1. Replies: 21
    Last Post: 02-04-2010, 10:06 AM
  2. [SOLVED] Zimbra logwatch.
    By nishith in forum Administrators
    Replies: 5
    Last Post: 06-10-2009, 05:42 PM
  3. Post instsallation problems
    By Assaf in forum Installation
    Replies: 14
    Last Post: 01-29-2007, 11:38 AM
  4. Services stopped working
    By lilwong in forum Administrators
    Replies: 4
    Last Post: 08-15-2006, 10:19 AM
  5. Fedora Core 3, Clean Install - Not working!
    By pcjackson in forum Installation
    Replies: 17
    Last Post: 03-05-2006, 07:38 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •