RE: failover - ReadList.com

5 msg	postfix/ldap - can one special_result_attribute...
2 msg	mailing list goes to bulk / spam folder
9 msg	SMTP Auth on multiple instances
4 msg	Auto-response, but not vacation
4 msg	bypassing reject_rbl_client for certain recipie...
12 msg	rewritten log
11 msg	Per user SPF and Anti Virus checks
9 msg	Instance on policies
2 msg	Removing internal mailers from headers
7 msg	Open Relay issue
1 msg	Messages not picked up from active queue
3 msg	Semantics question about myorigin
22 msg	mime, header_checks question
3 msg	problem using greylist and gmail
9 msg	451 4.3.0 Error: queue file write error and vir...
5 msg	Network_biopair_interop errors
1 msg	what means error msg in auth.log (failed to map...
5 msg	problem upgrading from 2.4.5 to 2.5.1

failover
\ Bernhard D Rohrer (29 Mar 2008)
. \ (Wietse Venema) (29 Mar 2008)
. . \ Gary V (30 Mar 2008)
. . . \ Gary V (30 Mar 2008)
. . . \ Gary V (30 Mar 2008)

13 msg	smtp_fallback_relay

Subject:	RE: failover
Group:	Postfix-users
From:	Gary V
Date:	30 Mar 2008

>> Bernhard D Rohrer:

>>> mydomain IN MX 30 mymta
>>> mydomain IN MX 40 mailfilter

> Since I believe he desires to use host "mailfilter" to filter all mail,
> then relay all mail to host "mymta", it would be the other way around.
> mailfilter would have an MX record and mymta would (should) not.

> Gary V

I should note however that if indeed you plan on removing an MX,
you have to be careful how you do it or you _will_ loose mail. Both MXes
must exist for a long enough time (maybe a week) for DNS servers to
see them both. I would also suggest first setting the mailfilter to a lower
numbered priority (making it the primary MX):

mydomain IN MX 20 mailfilter
mydomain IN MX 30 mymta

Then, after about a week, the mymta MX record could be removed. In
your case, because of what you are trying to accomplish, I would set
mailfilter to a lower numbered priority at any rate. Then, if you don't
want Internet traffic to mymta, you could leave the MX record, and
block port 25 inbound to mymta at the router or firewall. If you
don't want Internet connections to mymta, consider blocking port 25
whether you keep the MX record or not because even without an MX
record, spammers will connect to mymta via the A record.

Gary V

_________________________________________________________________
Watch “Cause Effect,” a show about real people making a real difference. Learn more.
http://im.live.com/Messenger/IM/MTV/?source=text_watchcause