Security and managability.

In addition, QMT is a heavy DNS user, so it's best to run a caching resolver on the QMT host. It's also a good idea make your authoritative DNS server (if you run one yourself) separate from your resolver. Hence, if you have a caching resolver on your QMT, your authoritative DNS should be on another host.

This doesn't mean it can't be done. Of course, it can. Question is, should it? Probably not.

--
-Eric 'shubes'

On 03/02/2011 02:02 PM, Cecil Yother, Jr. wrote:
I am curious why you say it's not a good idea to run a  QMT server and a
NS on the same machine?

CJ

On 03/02/2011 12:40 PM, Eric Shubert wrote:
On 03/02/2011 01:21 PM, Sergio M wrote:
I can say that with 64 concurrencyincoming and 16 spamd childs (and a
magic reboot, just in case)
its now flowing smoothly and the sessions are under 40/64 most of the
time. (for now)
# top
top - 17:19:24 up 43 min, 1 user, load average: 0.55, 0.73, 0.95
Tasks: 269 total, 1 running, 268 sleeping, 0 stopped, 0 zombie
Cpu(s): 5.2%us, 0.9%sy, 0.0%ni, 81.8%id, 11.9%wa, 0.0%hi, 0.2%si, 0.0%st
Mem: 1026432k total, 965996k used, 60436k free, 29036k buffers
Swap: 2064376k total, 120k used, 2064256k free, 393428k cached


I want to thanks you guys, and specially Eric for backing me up on this
one.


But i should say that we'd all like to see some fail2ban config files
and working setups for qmail and vpopmail.
Havent got much of that yet.

Thanks!
Sergio

---------------------------------------------------------------------------------


You're welcome, Sergio.

As an afterthought, that host really is overbuilt. Plus, running a NS
(authoritative I presume) on a QMT host isn't really a good idea. If
it were me, I'd put another 1G of ram (2G total) in the thing, run
VMware Server on it (or your virtualization product of choice), and
run QMT and the NS as separate VM guests. You'd have enough machine
left over to host something else as well if you'd like. Perhaps a
development host or 2, a backup QMT host, or whatever you like. FWIW.





---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
    For additional commands, e-mail: [email protected]


Reply via email to