Le samedi 24 Juillet 2004 02:16, Gilbert, Joseph a écrit :
I see. So, whatever other sort of filters I am running on my primary MTA
have to be enabled on my secondary MTA. Thus, any spam marking, stripping,
discarded, etc. that occurs on my primary has to be duplicated on any
secondary MTA I have. In my case, that would require additional hardware,
not to mention time configuring and testing the software config.
No, not absolutely every sort of filters, only MTA-level filters that aren't
interested in the email contents, but in its origin and the MAIL FROM /
HELO / RCPT TO it claims.
SPF check is part of these tests that should be implemented at MTA level (as
well as blacklists are), so it can block forged mail before it even enters
you mail queue.
But you don't need your secondary servers to perform email contents analysis,
such as SpamAssassin, or anti-virus and the like. You can leave this to the
primary if you wish.
Adding MTA-level tests only on the secondaries will probably not require
additional hardware, not being as resource-consuming as content analysis is.
--
Michel Bouissou <michel(_at_)bouissou(_dot_)net> OpenPGP ID 0xDDE8AC6E