Wietse Venema via Postfix-users:
> > The fault-tolerance of the bastion will be gone. Right now, if the
> > network to the premises fails or the on-premises node is unavailable,
> > the bastion is the buffering queue. If the bastion has to synchronously
> > wait for an on-premise verdict/veto, the nature of the queue and its
> > fault tolerance will change?
>
> In my smtpd_proxy_filter proposal there is no queue on the bastion
> host.
>
> internet -> bastion (postscreen -> smtpd)
> -> hidden (smtpd -> cleanup -> queue...)
>
> This also means no backscatter when the hidden smtpd rejects
> some remote client command.
Perhap a simpler arrangement is to run HaProxy on the bastion host,
talking to a hidden MTA. For availability, run multiple hidden MTAs
on different hosts, with internal forwarding to collect mail in one
place.
Wietse
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
