On Tue, May 19, 2009 at 1:07 PM, <post...@corwyn.net> wrote: > At 11:40 AM 5/19/2009, Noel Jones wrote: >>> >>> Add an entry to /etc/postfix/relay_recipients: >>> @the.backed-up.domain.tld x >> >> Technically correct, but unwise. >> You must validate recipients for the backed-up domain. > > why "must"? > > Won't the mail just be forwarded to the primary mail server, who can reject > it there? >
No. You will be a massive source of backscatter using this configuration. Your secondary server's mail queue will fill with NDRs for all the messages your accepted that cannot be delivered, and your site will end up blacklisted all over the place. >> ... >>> >>> maximal_queue_lifetime = 2d >> >> That's quite short. Do you have lots of undeliverable mail? > > For most of our mail, if it doesn't deliver in 2 days, it's never going to > deliver. And if it takes 2 days, it's already too late. > >>> zen.spamhaus.org reject_rbl_client bl.spamcop.net reject_rbl_client >>> dnsbl.sorbs.net reject_rbl_client cbl.abuseat.org >> >> cbl.abuseat.org is included in zen.spamhaus.org. You should remove it. > > Duly noted - thanks! > > > rick > >