Temporarily disable mail acceptance
Hi, To do some maintenance work, I need to temporarily disable mail acceptance in my postfix MX. I'm curious what is the best way to do this. The 2 (obvious) options I came up with: 1) stop listening on tcp/25, f.i. by firewall adjustment 2) adding some access check in smtpd_mumble_restrictions that returns DEFER for all transactions that would otherwise be accepted. There is no backup/fallback/secondary MX that comes into play when I start fumbling with this one. Is any of the above methods preferable? -- Regards, Tom signature.asc Description: OpenPGP digital signature
Re: Temporarily disable mail acceptance
Tom Hendrikx: Hi, To do some maintenance work, I need to temporarily disable mail acceptance in my postfix MX. I'm curious what is the best way to do this. The 2 (obvious) options I came up with: 1) stop listening on tcp/25, f.i. by firewall adjustment That means clients get a slow timeout, unless you configure a rule that sends a RESET to the client. 2) adding some access check in smtpd_mumble_restrictions that returns DEFER for all transactions that would otherwise be accepted. That's certainly nicer than having clients time out. Another option: 3) leave the port open on the firewall and disable the TCP service in master.cf. That gives the clients a quick RESET. Wietse There is no backup/fallback/secondary MX that comes into play when I start fumbling with this one. Is any of the above methods preferable? -- Regards, Tom -- End of PGP section, PGP failed!
Re: Temporarily disable mail acceptance
On 12/21/2010 4:35 PM, Tom Hendrikx wrote: Hi, To do some maintenance work, I need to temporarily disable mail acceptance in my postfix MX. I'm curious what is the best way to do this. The 2 (obvious) options I came up with: 1) stop listening on tcp/25, f.i. by firewall adjustment 2) adding some access check in smtpd_mumble_restrictions that returns DEFER for all transactions that would otherwise be accepted. There is no backup/fallback/secondary MX that comes into play when I start fumbling with this one. Is any of the above methods preferable? You could use soft_bounce See: http://www.postfix.org/postconf.5.html#soft_bounce for explanation. I've used this in the past, not sure if its the best practice, when I've had to move MX hosts under emergency circumstances. -Matt
