Re: Multiple SSL certs on multiple IPs

2012-04-23 Thread Mark Constable
On 16/04/12 23:14, Wietse Venema wrote: >> 12.34.56.78:smtp inet n - - - - smtpd >> -o myhostname=domain1.com > > This change all SMTP server responses that depend on the > myhostname settings. > >> Any thoughts or suggestions on how to improve this strategy? > > Use separate MTA instances. FW

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread /dev/rob0
On Mon, Apr 16, 2012 at 10:48:16PM +1000, Mark Constable wrote: > On 16/04/12 21:57, DTNX Postmaster wrote: > > I would not bother with prettifying headers or SMTP transaction > > output that is generally only seen by automated systems, > > It's mainly for "vanity" virtual hosting so our clients c

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread lst_hoe02
Zitat von Wietse Venema : Mark Constable: 12.34.56.78:smtp inet n - - - - smtpd -o myhostname=domain1.com This change all SMTP server responses that depend on the myhostname settings. Any thoughts or suggestions on how to improve this strategy? Use separate MTA instances. By changing t

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
On 16/04/12 23:13, Reindl Harald wrote: >> More importantly, with the -o myhostname=domain1.com they can >> fully pass any hardfail SPF test > > this has nothing to do with the hostname True from a fail/pass SPF inspection by the remote mailserver but not from a support techie eyeball point of vie

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Wietse Venema
Mark Constable: > 12.34.56.78:smtp inet n - - - - smtpd > -o myhostname=domain1.com This change all SMTP server responses that depend on the myhostname settings. > Any thoughts or suggestions on how to improve this strategy? Use separate MTA instances. By changing the MTA name in one SMTP clie

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Reindl Harald
Am 16.04.2012 14:48, schrieb Mark Constable: > On 16/04/12 21:57, DTNX Postmaster wrote: >> I would not bother with prettifying headers or SMTP transaction >> output that is generally only seen by automated systems, > > It's mainly for "vanity" virtual hosting so our clients can be > assured the

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
On 16/04/12 21:57, DTNX Postmaster wrote: > I would not bother with prettifying headers or SMTP transaction > output that is generally only seen by automated systems, It's mainly for "vanity" virtual hosting so our clients can be assured they have their own fully branded mail service. More import

Re: Multiple SSL certs on multiple IPs

2012-04-16 Thread DTNX Postmaster
On Apr 16, 2012, at 12:01, Mark Constable wrote: > I managed to get multiple SSL certs working on multiple virtual > IPs on the same server so vhost domains appeared to be completely > independent from the base server. I'd like an opinion as to whether > this is the right or best way to do this...

Multiple SSL certs on multiple IPs

2012-04-16 Thread Mark Constable
I managed to get multiple SSL certs working on multiple virtual IPs on the same server so vhost domains appeared to be completely independent from the base server. I'd like an opinion as to whether this is the right or best way to do this... domain1.com = 12.34.56.78 /etc/postfix/master.cf 12.34.