On Wed, Mar 30, 2011 at 10:12:40PM -0700, dchil...@bestmail.us wrote:

> I was beginning to get that idea :-(  I actually just read a coupld of
> post that you'd commented on about SNI (?), and that unless the clients
> are SNI-aware, not gonna help much.  Also DNSSEC as an option
> (someday?), but way over my head right now.
> 
> So, in addition to the SSL certs for mynet{1,2,3}.net I have a wildcard
> for *.mydomain.net.

Whatever single certificate works for you. Wildcard certs from real
CAs used to be expensive. If your cert is self-signed nobody cares
what names it contains. More typical (more affordable in most cases)
are SAN (subjectAltName) certs from real CAs that list multiple names.

> > Postfix queues mail by default when the destination is down.
> 
> I didn't understand that from reading.  So, what triggers the redeliver
> attempt?  I'm guessing some timer/cron function in master/main config?

    http://www.postfix.org/OVERVIEW.html#delivering
    http://www.postfix.org/QSHAPE_README.html

-- 
        Viktor.

Reply via email to