I am mulling over the thought of replacing my current solution, it works very well except for the following two issues: 1. LDAP recip verification for only one server, this gateway services multiple domains who's directories are independent. I need to be able to verify the various domains off of independent servers. 2. I use backup mx's, my current solution probably could work in this scenario but the support mechanism behind it is *very* weak and I can't get a perfect setup working. Spam hits the primary for a domain, gets blocked and then tries my secondary which sometimes accepts it, after which the primary always accepts from the secondary. What are some setups that use Postfix which you guys are having very good success with that isn't a burden to administer. The last thing I want to do is replace my one single app with many:) Thanks for any ideas! jlc
Joseph L. Casale wrote:> I am mulling over the thought of replacing my current solution, it > works very well except for the following two issues: > > 1. LDAP recip verification for only one server, this gateway services multiple > domains who's directories are independent. I need to be able to verify the > various domains off of independent servers. > > 2. I use backup mx's, my current solution probably could work in this scenario but > the support mechanism behind it is *very* weak and I can't get a perfect setup > working. Spam hits the primary for a domain, gets blocked and then tries my secondary > which sometimes accepts it, after which the primary always accepts from the secondary. >If you have a secondary mx, it MUST have the same (if not more aggressive) spam prevention as your primary for this exact reason. You also need to make sure that the secondary can reject mail for non-existent users so you don't send backscatter when the primary rejects the mail.> What are some setups that use Postfix which you guys are having very good success > with that isn't a burden to administer. The last thing I want to do is replace my one > single app with many:) >Can't help you there. I don't use Postfix. -- Bowie
Joseph L. Casale wrote:> I am mulling over the thought of replacing my current solution, it > works very well except for the following two issues: > > 1. LDAP recip verification for only one server, this gateway services multiple > domains who's directories are independent. I need to be able to verify the > various domains off of independent servers. >Postfix can handle that. You can have multiple lookup tables/maps. They do not even have to be the same type of database.> 2. I use backup mx's, my current solution probably could work in this scenario but > the support mechanism behind it is *very* weak and I can't get a perfect setup > working. Spam hits the primary for a domain, gets blocked and then tries my secondary > which sometimes accepts it, after which the primary always accepts from the secondary. >Like others have already said, lose it or fix it.> What are some setups that use Postfix which you guys are having very good success > with that isn't a burden to administer. The last thing I want to do is replace my one > single app with many:)postfix + spamass-milter will do it.