Hi all and Len !
Very interesting your answer. The most clear I ever saw regarding how to
make a safe system.
I have 2 question, regarding of this:
1. Should have S2 all the same like S1 ? I mean, accounts, lists, etc. or
just the service ?
2. I did a setup like this time ago, and the S2 was intercepting emails to
S1, so never reach the user. It is possible ? I did something wrong ? I am
using MS DNS !.
Thanks
Andres Gallo
CotelNet
www.villagesell.com.ar
-----Mensaje original-----
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]En nombre de Len Conrad
Enviado el: Lunes 28 de Febrero de 2000 06:11
Para: [EMAIL PROTECTED]
Asunto: Re: [IMail Forum] backup mail server
>I have one server running Imail 5.08 and one other running 5.08
so far, I'm following, I think! vbg
>my main server one and the other two for discussion purposes. Well this is
>what I would like to do, I would like to make server two a backup mail
>server in the event that I have to reboot # one of if it were to go down
for
>any reason.
In all your zone files:
@ IN MX 5 mail.server1.com
@ IN MX 10 mail.server2.com
(that syntax is for BIND8 for NT ( ftp://ns4.netpacq.net ), which I assume
you're running for security and performance reasons)
For all the zones for which your ns is authoritative, do the above. If s1
is down, the Internet will send mail to s2. S2 will then try to send mail
to s1, attempting every X minutes for Y attempts (set in
controlpanel:imail:smtp). The product of X x Y should be in the 12 to 24
hour range.
In your Imail smtp security tab of both s1 and s2, make sure your "Relay
for addresses" list the other server's ip addresss or subnet.
To tell Imail server2 that is can/should relay mail for the server1, in
your NT hosts file for server2,
c:\winnt\system32\drivers\etc\hosts
1.2.3.4 server1.com
In order to load balance your total mail traffic between the two Imails
plus have redundancy, you could set up 1/2 your zones on s1, with s2 as
2ndary mail, and 1/2 zones on s2, with s1 as 2ndary mail. you just mirror
the above setup of s2 backing up s1, so that s1 backups s2 for 1/2 your
zones. And the most prudent is to have a 3rd backup server off-site and
off-your backbone when real catastrophes hit.
In your BIND8, make sure to use ALLOW-TRANSFER on both your master and
slave ns to keep the black hats from transferring all your zones to their
machines.
Len
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
