On Mon, 16 Mar 2026 11:59:54 -0400 (EDT)
Wietse Venema via Postfix-users <[email protected]> wrote:

> b. This is the same problem as greylisting (when greylisting is
> used without aggregating data from clients with the same IP address
> prefix).

Hello, I have a follow up question about this and sharing postscreen
allowlist.

I'm considering load balancing two mail servers via DNS records:

example.com.  IN MX 10 mail1.example.com.
example.com.  IN MX 10 mail2.example.com.

Each mail server will run it own instances of postfix and dovecot. I
think I can synchronise dovecot mailboxes via replication. The goal is
redundancy, i.e. one mail server could be powered off and another mail
server has duplicate state to continue running the same mail services.

Greylisting across multiple redundant mail servers presents some
challenges.

I looked at:
https://www.postfix.org/POSTSCREEN_README.html#temp_allow_sharing

However it does not seem to fit in with my use case. Specifically, I
would prefer each server to have its own allowlist and regularly
replicate recent changes across. The Postfix memcache does not seem to
support this.

I'm using Postfix-3.8.4 and I think default_cache_db_type is btree.
Is there any way to safely replicate and merge Postfix berkely db across
multiple servers, for example, export/import allowlist at runtime via
text records? I suspect there isn't. 

Thanks.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to