ETRN support in MailScanner required

[Michael Mansour]

Hi Julian,

 --- Julian Field <mailscanner at ECS.SOTON.AC.UK> wrote:

> At 06:58 15/08/2004, you wrote:
> >My primary mailserver is on Fedora Core 1.
> >My backup mailserver is on Fedora Core 2.
> >Both run sendmail and MailScanner.
> >
> >For my backup mailserver, I use mailertable and
> dsmtp
> >configured in that with the primary server making
> ETRN
> >connections to the backup every hour (I'm using the
> >sendmail etrn.pl script from the contrib directory
> to
> >perform this step).
>
> Do not bypass the noetrn setting. It is there for a
> very good reason, and
> without it your systems can easily be exploited to
> bypass all your scanning.

Ok, I've re-added the noetrn back into the MailScanner
script.

> To make mail move from a backup mailserver (high MX
> value) to your primary
> mailserver (low MX value), you don't need to do
> anything except tell your
> backup mailserver that it can relay mail for your
> domains. In sendmail this
> just requires
> your.domain.com RELAY
> in your "access" db.

Hmm.. I didn't think that was the way to do it. What I
did was add:

domain1.com   esmtp: primary-mx.domain.com
domain2.com   esmtp: primary-mx.domain.com
etc

in the /etc/mail/mailertable file and then in
/etc/mail/relay-domains added:

domain1.com
domain2.com
etc

If I'm understanding you correctly, what you're saying
is that all I need to do is remove the above setup
within those files, and just add:

domain1.com   RELAY
domain2.com   RELAY

to my backup-mx?

I did give the backup MX a high MX number within DNS,
and the primary MX a low MX number.

Remember, what I want to do is store the mail in the
backup MX for the domains I host when the primary MX
is down. I thought my "esmtp" setup within the
mailertable and the "relay-domains" file mods were the
right way to do this?

> One of the primary jobs of a backup MX is to attempt
> delivery of mail to a
> better (i.e. your primary) MX. Your MTA (sendmail)
> will do this
> automatically. You don't need anything
> special/manual to do this at all.

Thanks for your comments Julian.

Michael.

> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their
> support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6
> 5947 1415 B654
>
> ------------------------ MailScanner list
> ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with
> the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ
> (http://www.mailscanner.biz/maq/) and
> the archives
> (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

Find local movie times and trailers on Yahoo! Movies.
http://au.movies.yahoo.com

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).