|Main Archive Page > Month Archives > postfix-users archives|
On 23/03/2012 15:56, Alex wrote:
>>> I am trying to build a relay server using postfix-2.8.7 on fedora16
>>> for one domain and a few sub-domains. This server should only accept
>>> mail from two specific public-facing postfix servers that accept mail
>>> for these domains, process the mail with amavisd/spamassassin, then
>>> forward the resulting mail to this relay server.
>>> Once the mail has been received by this relay server, it should
>>> forward it into the internal Exchange server for the end-users.
>>> Do I just define a few transport maps for this? Currently I have this:
>>> mailrelay.example.com local:
>>> example.com smtp:mail.example.com
>>> dom1.example.com smtp:smtp.dom1.example.com
>>> .dom1.example.com smtp:smtp.dom1.example.com
i would go to smtp:[smtp.dom1.example.com]25
in order to avoid mx record lookup for the domain.
adn the local: is not really needed.
just list the remote domains.
i would see some benefit with a main relay server that can be a
redundant point for the domain queue.
>>> Since this server isn't reachable by any hosts other than the two that
>>> are trusted, there aren't any local users, and no real decisions need
>>> to be made, is there really anything else necessary to do this?
>> What prevents you from simply relaying the mail from the first two
>> Postfix hosts directly to the Exchange server, instead of installing
>> this unnecessary intermediate relay? It would be a much simpler
>> solution, and cheaper, in hardware, power, cooling, management, etc.
>> What is your design goal here? As stated, all you're doing is literally
>> adding a temporary queue between the 2 Postfix and Exchange
>> servers--mail comes in, mail goes out. I fail to see the benefit of
>> such a setup.
> Yes, the overhead could be avoided. I think the decision was made
> because the systems are 3000 miles from each other and when the
> systems were created more than ten years ago it was thought it would
> be better to separate the services.
> Thanks Stan,
-- Eliezer Croitoru https://www1.ngtech.co.il IT consulting for Nonprofit organizations eliezer <at> ngtech.co.il