On Dec 20, 2009, at 9:37 PM, Houssam El Hallak wrote:
>
>
>
> Hello
> this is my first post here , so If any mistake with this post please let me
> know .
>
> question 1 : is this a good postfix architecture ??
>
> I have 2 postfix Servers :
> DMZ_postfix which has basic protection (192.168.0.1). and forward emails to
> LAN_postfix
What do you mean with 'basic protection'? The way I read it this could cause
backscatter and thus is not a good idea.
> LAN_postfix which has the users accounts , amavis_new , spamassassin and
> clamav
Why do you want to use 2 postfix machines?
> is it good to install tha anitspam and the anti firus on the lan server ,or I
> had to do it on the DMZ server ??
Depends, I think most antispam/antivirus should be on the DMZ postfix server
and only the user dependent antispam should be on the LAN postfix server.
>
> Question 2 : Lan_postfix server consider my DMZ_postfix as local , is it
> normal ?
If it is in your local network then probably yes, please provide 'postconf -n'
>
> I have something like this in the log :
> Passed Clean LOCAL 192.168.0.1 , 217.17.80.8
> I understand that emails sent from my server are considered LOCAL , but not
> emails coming from outside .
>
> infact amavis consider all my emails as LOCAL
>
> Thank you in advance for your help
>
> Windows Live: Make it easier for your friends to see what you’re up to on
> Facebook.