[CentOS] Antispam with Postfix

Mon Sep 28 20:46:12 UTC 2009
Bowie Bailey <Bowie_Bailey at BUC.com>

Joseph L. Casale wrote:
> I am mulling over the thought of replacing my current solution, it
> works very well except for the following two issues:
>
> 1. LDAP recip verification for only one server, this gateway services multiple
> domains who's directories are independent. I need to be able to verify the
> various domains off of independent servers.
>
> 2. I use backup mx's, my current solution probably could work in this scenario but
> the support mechanism behind it is *very* weak and I can't get a perfect setup
> working. Spam hits the primary for a domain, gets blocked and then tries my secondary
> which sometimes accepts it, after which the primary always accepts from the secondary.
>   

If you have a secondary mx, it MUST have the same (if not more
aggressive) spam prevention as your primary for this exact reason.  You
also need to make sure that the secondary can reject mail for
non-existent users so you don't send backscatter when the primary
rejects the mail.

> What are some setups that use Postfix which you guys are having very good success
> with that isn't a burden to administer. The last thing I want to do is replace my one
> single app with many:)
>   

Can't help you there.  I don't use Postfix.

-- 
Bowie