Increasing spam level to backup MX

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Increasing spam level to backup MX

danjjde
Hi Friends,

activating a backup server I realized that some spammers using this
server to send spam to my relay_recipient_maps addresses. Spam is then
successfully forwarded to the main server.

Is there a parameter to prevent this type of action? A type check "do
not receive email if the main server is reachable...?

Or should I operate directly by SpamAssassin?

many many thanks



Davide

Reply | Threaded
Open this post in threaded view
|

Re: Increasing spam level to backup MX

Philip Paeps
On 2017-09-11 14:13:29 (+0200), Davide Marchi wrote:
>activating a backup server I realized that some spammers using this
>server to send spam to my relay_recipient_maps addresses. Spam is then
>successfully forwarded to the main server.
>
>Is there a parameter to prevent this type of action? A type check "do
>not receive email if the main server is reachable...?
>
>Or should I operate directly by SpamAssassin?

Your backup servers should have the same filtering in place as your main
server.  If not, spam will sneak through.

For a simple setup, a separate backup server will often do more harm
than good.

If you're using postscreen and you have multiple IP addresses
configured,, you should investigate the
``postscreen_whitelist_interfaces`` option to give spammers who try
backup MXes a hard time.

Last time I checked, it was not possible to share the postscreen
temporary whitelist between machines.

Philip

--
Philip Paeps
Senior Reality Engineer
Ministry of Information
Reply | Threaded
Open this post in threaded view
|

Re: Increasing spam level to backup MX

danjjde
Il 2017-09-11 14:23 Philip Paeps ha scritto:

> On 2017-09-11 14:13:29 (+0200), Davide Marchi wrote:
>>activating a backup server I realized that some spammers using this
>> server to send spam to my relay_recipient_maps addresses. Spam is then
>> successfully forwarded to the main server.
>>
>>Is there a parameter to prevent this type of action? A type check "do
>> not receive email if the main server is reachable...?
>>
>>Or should I operate directly by SpamAssassin?
>
> Your backup servers should have the same filtering in place as your
> main server.  If not, spam will sneak through.
>

it's so

> For a simple setup, a separate backup server will often do more harm
> than good.
>

:-|

> If you're using postscreen and you have multiple IP addresses
> configured,, you should investigate the
> ``postscreen_whitelist_interfaces`` option to give spammers who try
> backup MXes a hard time.
>
no, I've not multiple IP addresses configured..

> Last time I checked, it was not possible to share the postscreen
> temporary whitelist between machines.
>
> Philip

Thanks very much Philip for your tips,
I will investigate ;-)

ciao!

Davide