On Wed, 22 Aug 2007, Rense Buijen wrote:

> I didn't know that a backup MX can lead to more trouble then
> having just one, gee, I thought it was a good thing but it turned
> out to be a quite bad one :)

It *is* a good idea. You just can't cheap out on configuring it. 

Ideally, your backup MXs should be configured with all the same
capabilities as your primary MX - username authentication, SA,
antivirus, RBLs, etc. - or they become an exploitable back door and a
nuisance to the rest of the world.

Spammers routinely target backup MXs first to try to take advantage of
this.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  People seem to have this obsession with objects and tools as being
  dangerous in and of themselves, as though a weapon will act of its
  own accord to cause harm. A weapon is just a force multiplier. It's
  *humans* that are (or are not) dangerous.
-----------------------------------------------------------------------
 3 days until The 1928th anniversary of the destruction of Pompeii

Reply via email to