Re: Best way to protect backup-mx?

2012-08-08 Thread tobi
Thanks for this very plausible reason for not doing what I wanted :-) I did not think about such circumstances. Cheers tobi Am 07.08.2012 22:25, schrieb Reindl Harald: be carfeul with such things that you primary MX is up from the connection of your backup-MX means virtually nothing

Re: Best way to protect backup-mx?

2012-08-08 Thread tobi
Am 07.08.2012 22:40, schrieb Ansgar Wiechers: Why do you consider this a problem? Your backup MX should neither accept nor allow anything the primary MX wouldn't. Actually I do not consider this a real problem My setups on my backup-mx are as identical as possible to my main-mx. It's just

Re: Best way to protect backup-mx?

2012-08-08 Thread Sebastian Wiesinger
* tobi tobs...@brain-force.ch [2012-08-07 18:46]: Hi list, Sorry list, hi Tobi: I wanted to tell you that your DNSSEC for brain-force.ch is broken so resolvers which validate DNSSEC will not be able to resolve your domain (and so I can't send you mails directly). You might want to fix this.

Best way to protect backup-mx?

2012-08-07 Thread tobi
Hi list, I'm currently doing some brainstorming on how to protect backup-mx servers from being directly contacted by clients. I found that postscreen can do this, but as far as I read only if the backup runs on the same machine. Another idea that came in my mind is that the backup-mx checks the

Re: Best way to protect backup-mx?

2012-08-07 Thread Bryan Irvine
On Tue, Aug 7, 2012 at 9:45 AM, tobi tobs...@brain-force.ch wrote: Hi list, I'm currently doing some brainstorming on how to protect backup-mx servers from being directly contacted by clients. Why would you want to protect your clients from your backup mx?

Re: Best way to protect backup-mx?

2012-08-07 Thread Ansgar Wiechers
On 2012-08-07 tobi wrote: I'm currently doing some brainstorming on how to protect backup-mx servers from being directly contacted by clients. That kinda defeats the purpose of having a backup MX in the first place. Regards Ansgar Wiechers -- Abstractions save us time working, but they don't

Re: Best way to protect backup-mx?

2012-08-07 Thread Stan Hoeppner
On 8/7/2012 11:45 AM, tobi wrote: Hi list, I'm currently doing some brainstorming on how to protect backup-mx servers from being directly contacted by clients. I found that postscreen can do this, but as far as I read only if the backup runs on the same machine. Another idea that came in

Re: Best way to protect backup-mx?

2012-08-07 Thread Marcio Merlone
Em 07-08-2012 15:04, Stan Hoeppner escreveu: On 8/7/2012 11:45 AM, tobi wrote: Hi list, I'm currently doing some brainstorming on how to protect backup-mx servers from being directly contacted by clients. I found that postscreen can do this, but as far as I read only if the backup runs on the

Re: Best way to protect backup-mx?

2012-08-07 Thread tobi
Am 07.08.2012 20:04, schrieb Stan Hoeppner: The first thing you need to do is define for us what protect backup-mx servers means. What, exactly, do you want to protect them from? Sorry if my intention was only clear to myself ;-) I want to prevent clients from connecting my backup-mx as

Re: Best way to protect backup-mx?

2012-08-07 Thread Reindl Harald
Am 07.08.2012 22:03, schrieb tobi: Am 07.08.2012 20:04, schrieb Stan Hoeppner: The first thing you need to do is define for us what protect backup-mx servers means. What, exactly, do you want to protect them from? Sorry if my intention was only clear to myself ;-) I want to prevent

Re: Best way to protect backup-mx?

2012-08-07 Thread Ansgar Wiechers
On 2012-08-07 tobi wrote: Am 07.08.2012 20:04, schrieb Stan Hoeppner: The first thing you need to do is define for us what protect backup-mx servers means. What, exactly, do you want to protect them from? Sorry if my intention was only clear to myself ;-) I want to prevent clients from