policy that isn't enforced on the secondary is ridiculous, given that spammers love secondaries.)
backup MXs should be turned off (no SMTP service) until the backup MX detects the primary MX is down, then the backup turns itself on. When it detects the primary is on-line, it turns itself off (that's the big picture, there are lots of details).
It took me awhile to come to this setup. The backup MXs are nothing but sinks of bandwidth loss and of course another spam channel, all much worsened if the backup MX doesn't have exactly the same restrictions as the primary MX.
> Does anyone have some suggestions on how to prevent those dictionary > attacks?
You can't prevent anything that comes from 1000's of IPs on subscriber networks. Your system has to be able to withstand the abuse.
Len
_____________________________________________________________________ http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
