cmiiw, but it's sound that you want to provide spamfilterbox for your selected clients. this is what I have done for mycompany.com's email server (1 domain but you can do it with more domains)

I have 2 servers working as MX and POP3 and another 2 server for SMTP
(total 5 servers with NFS server - I know that we should have replicated/backup NFS server). reading your requirement, you may want to setup server(s) for POP3 and other server(s) for MX and SMTP

for MX and SMTP server you can configure the anti-spam settings as custom as you like, and you can use it for inbound (MX) connections for specific domain(s) by changing the MX record and outbound connections by asking/telling you clients to use this server on their MUA.

If you asking how to create 2 qmt servers (high-availability/fail-over) it was done long time ago when Jake Vickers still maintaining QMT (I think his video tutorial is still on youtube) and also help from local consultant. At that time I am also find out how to separate SMTP service on other server but still users still can be authenticated.

files that I configured:
- vpopmail mysql config (pointing to same mysqlserver as POP3)
- and copying file(s) on /var/qmail/cdb
- etc. I forgot if there is another files need to configure

if you have a lot of free servers you may want to separate some services:
- MX / spamfilterbox = received emails from rest of the world, high antispam setting
- POP3 / IMAP / Webmail = for clients receiving email
- SMTP = for clients receiving email, low antispam setting i.e doesn't include spamhaus and spamdyke on configuration - MySQL / NFS share = to store vpopmail's configuration and mailbox. you can even split this 2 services

each services above, you could also create it's redundant/backup/high availability


On 06/15/13 1:34, Dan McAllister wrote:
Greetings all --

I have a QMAIL question about SMART HOSTs...

First, to clarify -- a SMART HOST is a mail server designed to be a filter. It accepts mail for configured domains, and/or from those domains - and then forwards them on, or blocks them, based on rules -- often SPAM filter types of rules.

Its actually pretty easy to configure QMail as a SMART HOST, just using tcp.rules and smtproutes... but that's not my question.... but it /is /close, so let's look at how you do that first:

_To configure QMAIL to accept inbound mail ONLY from a smart host_, you simply create a tcp.rules entry that allows (usually unfiltered) mail from the special server, and denies all others. You could also use IPTables to only allow connections on port 25 from that specific host (or hosts).

By example, assuming your smart host is at 1.2.3.4:
 - In /tcp.smtp/ you might say
*   1.2.3.4:allow,RELAYCLIENT="",SENDER_NOCHECK="1"**
**   :deny**
* - Or, in /iptables/, you might put
***-A INPUT -s 1.2.3.4 -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT** ** -A INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j REJECT**(or, I prefer to DROP, so it takes longer for the mis-configured client to figure out there is a problem)
*
_To configure QMAIL to forward ALL outbound mail to a smart host_, you simply make a wildcard entry in smtproutes that points all mail to that host.
*   :1.2.3.4*


This is all well and good for someone who is stuck behind their ISP's smart host (when they block port 25 otherwise - e.g. Verizon DSL)...

BUT, what if I want to employ a SMART HOST as a subscriber SPAM FILTER for both inbound and outbound mail -- but only for SOME domains that I host??

Sure, I can use SPF to force inbound messages FOR a specific domain to come from the SMART HOST (and I'm open to better ways to do that)... But, how do I configure outbound mail FROM a specific domain to be routed only through the SMART HOST?
 - smtproutes rules apply to the receiving domain, not the sending one!

I'm interested to hear ideas....


Thanks,

Dan McAllister
QMT DNS/Mirror Admin

--

PLEASE TAKE NOTE OF OUR NEW ADDRESS
===================================
IT4SOHO, LLC
33 - 4th Street N, Suite 211
St. Petersburg, FL 33701-3806

CALL TOLL FREE:
   877-IT4SOHO

877-484-7646 Phone
727-647-7646 Local
727-490-4394 Fax

We have support plans for QMail!


Reply via email to