Milter-greylist

Hi,

I'm trialling milter-greylist on the BBC mail infrastructure, which
receives around 1 million emails per day.  Recently I added

  acl greylist domain /[0-9][0-9]*\-[0-9][0-9]*\-[0-9][0-9]*/
  acl greylist domain /[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*/
  acl greylist domain /[0-9]{12}/

to the config to greylist anything which looks like a dynamic address,
and since making that change my monitoring has shown milter-greylist
to fail an awful lot more.

The milter-greylist processes are sitting at around 600M resident
memory, and are causing the system to swap.

  1. Can I limit the amount of memory milter-greylist will use to
     cache lookups?  Obviously with a large number of connections this
     is going to grow, but I cannot add more memory to the MX easily.

  2. Why is the increased load causing more failures?  I test the
     filter with something similar to

       acl greylist from /greylist-test.*@host/

     and generate a random string after "greylist-test" for MAIL FROM
     so that it won't get cached.  Today the number of failured for
     this test has been extremely high (previously I saw a number of
     cases where it wasn't being greylisted, but it appears to get
     worse with load).

This is sendmail 8.13.7 with security fixes, milter-greylist 2.0.2,
Solaris 9 and everything compiled with Sun Studio 11.

Thanks,

-- 
Jonathan Perkin                             Unix Systems Administrator
Formerly BBC Technology                  http://www.siemens.co.uk/sbs/
Siemens Business Services Ltd,  Maiden House, Vanwall Road, Maidenhead
                                 -=-
This email (and any attachments) contains confidential information and
is for the exclusive use of  the addressee(s).  Any views contained in
this e-mail are not the views of Siemens Business Services, ORS unless
specifically stated.  If you are not the addressee then any distribut-
ion, copying or use of this email is prohibited.  If received in error
please advise the sender and delete / destroy it immediately.  We acc-
ept no liability  for any loss  or damage suffered by any person aris-
ing from  use of this e-mail / fax.  Please note that Siemens Business
Services ORS monitors e-mails sent or received.  Further communication
will signify your consent to this.
                                 -=-
Siemens Business Services Ltd          Registered No: 04128934 England
Registered Office: Siemens House, Oldbury, Bracknell, Berks.  RG12 8FZ