Re: Skipping RBL checks for internal servers

[Reindl Harald]

Am 19.03.2015 um 13:53 schrieb Matus UHLAR - fantomas:

Am 18.03.2015 um 22:29 schrieb David B Funk:

Just have an internal mail-submission port that isn't routed thru SA

On 18.03.15 22:46, Reindl Harald wrote:

may not be possible if you have hundrets of domains without setup a
internal DNS view just for a different MX

Am 19.03.2015 um 09:22 schrieb Matus UHLAR - fantomas:

You apparently mean internal servers, not domains

On 19.03.15 10:13, Reindl Harald wrote:

no i mean what i say - domains

there are setups with more than one mailserver and so different MX in
combination with hosting hundrets of domains - it that case you can't
bypass the normal mailroute that easy

That's why I said internal servers not domains: number of domains doesn't
matter when the mail is sent the same way, from the same IP, through the
same port, or locally via sendmail binary.

How can multiple domains on one server affect this?

* multiple domains
* multiple servers

for a normal mailflow you can't change the port to something else than 25 without handholding that for every domain / transport on every machine and hence the solution would be SA not ignoring RBL so that you can list the IP's on a rbldnsd and give a high negative score and no, you don't want a relay_host from your webservers and other mailservers because that affects the intention to relay outgoing mail directly - you MTA on the webservers don't know and must not need to know anything about internal or external domains, it just makes a DNS request for the MX and that's it

signature.asc
Description: OpenPGP digital signature