RE: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread Chris Santerre
, May 27, 2005 12:16 PM To: spamassassin-users@incubator.apache.org Subject: Re: SA Gateway - MS Exchange -- what if MSE down? Hi Tony, I have this same setup, and due to the nature of Exchange it seems to go down a lot more often than the postfix box. What happens is that Postfix queues the e

RE: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread Kristopher Austin
Tony, Your main question has already been answered, but I noticed something in your proposed setup that concerns me. You state in your diagram that you plan to have the MSE box as the secondary MX record. This would not be a good idea. From experience, we have seen that spammers try the

Re: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread E. Falk
, then you better have more then one server. Or a big HD for the queue ;) --Chris -Original Message- From: E. Falk [mailto:[EMAIL PROTECTED] Sent: Friday, May 27, 2005 12:16 PM To: spamassassin-users@incubator.apache.org Subject: Re: SA Gateway - MS Exchange -- what if MSE down? Hi

RE: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread Matthew.van.Eerde
Kristopher Austin wrote: You state in your diagram that you plan to have the MSE box as the secondary MX record. This would not be a good idea. From experience, we have seen that spammers try the secondary MX first in hopes of finding a server that is not protected by a spam scanner. This

Re: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread David Brodbeck
Tony pace wrote: Thanks for all the input. The diagram was simplistic - the real MSE is a couple layers away. One thing that no one has mentioned is that it's vitally important that the edge gateway (the postfix system) have a way of knowing what users are valid. Otherwise you will end up

Re: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread David Brodbeck
Frank Coons wrote: Does Exim allows LDAP queries across a DMZ or do both machines need to be either inside or outside the DMZ for it to work? I've never tried it, but it's just a TCP connection. As far as I know it should work, as long as the firewall is not blocking the connection. I

Re: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread Jim Maul
David Brodbeck wrote: Frank Coons wrote: Does Exim allows LDAP queries across a DMZ or do both machines need to be either inside or outside the DMZ for it to work? Exim (and anything else) shouldnt care if one machine is in the DMZ. They dont both need to be in the DMZ to work. However,

Re: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread Steven Dickenson
[EMAIL PROTECTED] wrote: Bingo. I have a similar setup in place (s/postfix/sendmail/) and I don't have my Exchange box listed as an MX at all. I also have port 25 to the Exchange box firewalled off at the router to avoid portscanning. Not a good idea, IMHO. What happens if your SA gateway

RE: SA Gateway - MS Exchange -- what if MSE down?

2005-05-27 Thread Matthew.van.Eerde
Steven Dickenson wrote: [EMAIL PROTECTED] wrote: Bingo. I have a similar setup in place (s/postfix/sendmail/) and I don't have my Exchange box listed as an MX at all. I also have port 25 to the Exchange box firewalled off at the router to avoid portscanning. Not a good idea, IMHO. What