Rod, The only time that any legitimate traffic should flow through our "secondary MX" is when the primary is down completely. Our downtime on the primary network is so negligible that the more restrictive anti-spam filtering is really not worth worrying about. Keep in mind, even if our primary was down for hours, the only servers that would be affected are those that are already blacklisted from having sent e-mail to spam traps recently.
In reality, the "secondary MX" I am talking about will actually be our LAST MX (tertiary???), which is at a different location on a different feed. A true second MX will be on that same circuit, and will act as the primary back up. I probably should have stated that previously, but couldn't figure out the word for "third" MX. :-) In the event of any failure of our primary circuit/server, all traffic should go to the secondary. Never, ever, ever should a single piece of legitimate e-mail go to the third MX. There is absolutely no conceivable circumstance (outside of a deranged sysadmin, who should probably be fired) that any legitimate mail server would ever connect to an MX with a priority of 50, when a server with a priority of 10 or even 30 is available. I am having this box reject pretty much everything, and will put the SapmCannibal there. That's the perfect position for it, IMHO. William Van Hefner Network Administrator Vantek Communications, Inc. > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Rod Dorman > Sent: Thursday, January 27, 2005 1:09 PM > To: [email protected] > Subject: Re: [IMail Forum] SpamCannibal (was another topic) > > > On Thursday, January 27, 2005, 14:09:10, William Van Hefner wrote: > > ... > > FYI, I am only considering installing this on my secondary > MX, where > > absolutely NO legit traffic belongs in the first place. > > You'll have to clarify this one for me. > > If there's a network hiccup, or you're rebooting, or > whatever that prevents a server from connecting to your > primary MTA they're going to try connecting to your secondary. > > How can this not be considered "legit traffic"? > > -- > [EMAIL PROTECTED] "The avalanche has already started, it is too > Rod Dorman late for the pebbles to vote." ? > Ambassador Kosh > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
