<quote who="Glen Turner"> > On Sun, 2004-02-01 at 16:00, Jeff Waugh wrote: > > > 2) If your primary mail server goes down often enough or long enough > > that you think you need a secondary MX, you really need to fix your > > primary, build a cluster or outsource. > > Why? You simply need to configure the secondary MX correctly, so that it > does the same level of virus, spam and attachment checking as your main > MX. This essentially means a machine under your control, but located at a > co-lo site.
I should have stated this more reflexively per point 1. It is certainly less relevant if you control your secondary (which is indeed a simpler approach than clustering across networks - good call). > To your list I'd also add > > - run authenticated SMTP and reject unauthenticated messages claiming to > be from your domain. (Yes, although it's probably worth mentioning that while this is great for enterprise mail services where the admin can define the rules, doing the rejects might not please ISP or mail carrier customers too much.) - Jeff -- GVADEC 2004: Kristiansand, Norway http://2004.guadec.org/ "The Vines are the latest pretenders to the thrown." - Vines review by liv4now.com -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
