Gustavo Balduino: > From what you two concluded, there's no way to reach this behavior > without splitting the instances, am i correct?
A single instance may be possible but it would be more complicated and more difficult to maintain than to the two-instance approach. It would in fact be the simplest if you could run the MSA instance(s) and the MTA instance(s) on different hosts (so that they have different IP addresses). Then, the MSA can safely be used for all customers, not just for the customer that requires a security gateway. With distinct IP addresses there is no risk of false 'mailer loop' detections when the MSA delivers messages directly to the MSA instance from customers that don't use a security gateway. Viktor was correct and I missed a subtle nuance when I replied to his post. Wietse