Charlie Orford: >I know I am starting to sound like a broken record but I really >think a sensible, clean method to run a secondary mx that is capable >of verifying recipients and accepting mail (rather than deferring) >with or without the primary being up would be a nice feature to >have.
Indeed, and that is not what "tempfail_action = permit" does. That explicitly verifies no recipients while the primary is down. I have seen no credible report that your verify cache contains information about a significant fraction of the recipient population. >A postfix feature like: address_verify_sequence = >address_verification_polling, relay_recipient_maps That is unnecessary complexity: just use relay_recipient_maps and be done with it. After all, relay_recipient_maps is the only available measure against backscatter when the primary is down, and you already have to maintain it anyway. Wietse