Leif Neland wrote: > From: "Roger E. Rustad, Jr." <[EMAIL PROTECTED]> > >> I have a ASSP antivirus relay setup >> (assp.sourceforge.net<http://assp.sourceforge.net>) >> that's currently filtering spam and viruses for one domain. I'd like >> for it to do the same for other domains, but would like to make sure >> if (for whatever reason) the relay is down, mail still gets through. > > If you announce your MTA in the MX-records, it will get spammed, > spammers doesn't respect MX priorities, as they know that the backup > mx'es often doesn't have the same level of spamfiltering as the > primary MX.
Yup. In fact, even if you don't announce your MTA in the MX-records, it will get spammed. Any open SMTP server will be portscanned. > If you can monitor the primary mx, and only open access to the backup > mx when the primary is down, you might be able to keep the spam down. There have been people that configured their backup MX to periodically check in with the primary MX and only accept connections when the primary is down. My personal preference is to load-balance two identical MX's with spam- and virus-filtering on both. That way if a box breaks the mail still flows. The mail must flow. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer _______________________________________________ http://lurker.clamav.net/list/clamav-users.html
