ETRN support in MailScanner required

Julian Field mailscanner at ecs.soton.ac.uk
Sun Aug 15 12:40:54 IST 2004


<x-flowed>
At 06:58 15/08/2004, you wrote:
>My primary mailserver is on Fedora Core 1.
>My backup mailserver is on Fedora Core 2.
>Both run sendmail and MailScanner.
>
>For my backup mailserver, I use mailertable and dsmtp
>configured in that with the primary server making ETRN
>connections to the backup every hour (I'm using the
>sendmail etrn.pl script from the contrib directory to
>perform this step).

Do not bypass the noetrn setting. It is there for a very good reason, and
without it your systems can easily be exploited to bypass all your scanning.

To make mail move from a backup mailserver (high MX value) to your primary
mailserver (low MX value), you don't need to do anything except tell your
backup mailserver that it can relay mail for your domains. In sendmail this
just requires
your.domain.com RELAY
in your "access" db.

One of the primary jobs of a backup MX is to attempt delivery of mail to a
better (i.e. your primary) MX. Your MTA (sendmail) will do this
automatically. You don't need anything special/manual to do this at all.
--
Julian Field
www.MailScanner.info
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>



More information about the MailScanner mailing list