>BTW in the meantime, if I add this (where mx2.mydomain.com is our >secondary MX hostname), I take it that would be a good idea:
>
>permit_mx_backup_networks = $mynetworks mx2. mydomain.com

On Tue, 11 Jun 2024 at 10:36, Matus UHLAR - fantomas via Postfix-users <
postfix-users@postfix.org> wrote:
no, these are IP addreses or ranged, not hostnames.
"ranges"
have you added those domains to relay_domains?

On 11.06.24 11:02, Gilgongo via Postfix-users wrote:
OK so I assume I can use the IP address of the primary and secondary MX
servers, since all our domains are hosted on those IPs.

It would make sense to use permit_mx_backup on secondary MX server and setting the permit_mx_backup_networks to IP of primary server.

That way, you don't have to list domains pointing to primary MX, but your server still accepts mail for anyone who lists your servers as MX, even if your primary MX does not accept it (address verification would help)

Spammers did abuse such mechanisms for sending spam.

All the domains are in relay_domains, yes (the current setup we have has
been running fine for many years: https://pastebin.com/S2q1fvaB and
https://pastebin.com/MmWvZaVQ - I'm just wanting to bring it more up to
date).

I only see there:

relay_domains = $mydestination

wich makes little sense, because this way you would only relay fo
- domains that are local (and thus not relayed)
- their subdomains (due to parent_domain_matches_subdomains setting)


To answer your previous question: yes, relay_domains is the list of domains your server is supposed to provide backup MX for, independently on permit_mx_backup and permit_mx_backup_networks setting.

Thanks, but if that's the case what I don't understand is why the mail
queue filled up with double-bounce messages to postmaster when I tried
removing permit_mx_backup from the config. It seems that mx_backup is
somehow necessary for our normal operation.

Since I don't see any of those double bounces, I can only guess it's a symptom of other problem:

myhostname = mx0.domain.org.uk
myorigin = $mydomain
mydestination = $myhostname, alice.$mydomain, localhost.$mydomain, localhost, 
/etc/postfix/hatters/localdomains

I can guess your server sends mail from "domain.org.uk" but can't process those.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Nothing is fool-proof to a talented fool.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to