Hi Steve,
>
We use sqlgrey as a policy daemon for greylisting. It runs on both our
mail servers with a shared database on one of them. If the database is
unavailable for some reason on the main server the backup rejects mail
with "451 4.3.5 Server configuration problem" Is it possible to change
the default to accept the mail if the policy daemon fails. Most of our
users would prefer a bit of extra spam to losing genuine mail.
While agreeing on the arguments the other responders have raised we are
using the hapolicy script from postfwd to deal with broken Policy
servers, i.e. for dovecot quota-status requests to the message stores.
http://postfwd.org/hapolicy/index.html
Works very well, the only disadvantage is that it uses quite a bit of
memory due to spawning a full perl interpreter for each lookup process.
A daemon that forks on accept() would probably be a lot more
memory-saving, but it would be another part that could be broken.
Bernhard