On Sun, Oct 11, 2009 at 07:05:34PM -0400, Wietse Venema wrote: > Chris Babcock: > > Victor Duchovni <[email protected]> wrote: > > > This answers the OP's question, but perhaps one should ask why the OP > > > believes this to be a good idea? > > > > I can't answer for the original poster, but I run separate Postfix > > instances for each of my hosted domains. I have a low volume overall, > > which makes deliverability more volatile. One of my domains has a large > > proportion of automatically generated mail and a couple are managed for > > third parties. Running mail servers for each domain as an independent > > entity makes traffic monitoring possible and isolates the other domains > > from the potential effects of real or perceived misbehavior from the > > others. > > These are excellent reasons for using separate Postfix instances; > they address the problem of domain reputation, unlike the OP's > request which appeared to be concerned with different server banners > on different IP addresses.
Would setting myhostname per IP be useful for SASL authentication without forcing thousands of users to reconfigure their e-mail client to use usern...@domain? I actually just found out I will be needing to do something like this about 1 hour ago after migrating the first of four domains from four different servers to one Postfix/Cyrus-IMAPd/web-cyradm setup. The default sasl settings for the submission port blew up all of my remote outlook clients... I found options this morning that I didn't know existed. :-) I had just decided I would probably need to do something like this for each IP's submission port: -o smtpd_sasl_local_domain = domain.name It might be more POLA to with smtpd_sasl_local_domain defined in main.cf as $myhostname and just add the myhostname = domain.name to the submission port for that IP. I hadn't considered the possibility of using myhostname on a per daemon level until I saw this thread. Then the banner and everything ... might all change. Might help prevent users from freaking out if they are paranoid. Haven't had time to try it yet. -- Scott Lambert KC5MLE Unix SysAdmin [email protected]
