On Thu, Sep 23, 2010 at 9:39 PM, Wietse Venema <wie...@porcupine.org> wrote:
> One possibility is to have postscreen listen on multiple IP addresses
> with different MX preferences, and to require that clients don't
> connect to the secondary port before the primary.

Clever!

> The problem I see with this is that a site with multiple MX hosts
> would need to share the postscreen database. I'm concerned that a
> networked SQL database would introduce unacceptable latencies and
> that it the postscreen database would become a single point of
> failure for multuple MX hosts.

I haven't peeked inside postscreen yet, but my guess is that with
postscreen greylisting we would be facing a similar situation, i.e.,
high latency (possibly redundant) shared database for multi-MX
sites, or local lower-latency store for single-MX deployments. I
don't see  how to effectively realize greylisting in single-process
multi-MX postscreen. Perhaps you plan to implement the greylist
database manipulation code outside postscreen, using multiple
proxymap-like helper processes?

Leandro

Reply via email to