View previous topic :: View next topic |
Author |
Message |
myconid n00b
Joined: 21 Feb 2003 Posts: 21
|
Posted: Thu Jun 17, 2004 8:43 pm Post subject: Deticated Antivirus/Spam Gateway (Postfix/Amavis) Problem |
|
|
I currently have a single machine running as a virtual mail server for about 100 domains. I do very little spam filtering, and no antivirus scanning. I would like to change this by placing a new machine in front of the existing mail server that will simply:
a. Accept all inbound email, process it for spam/viruses
b. Pass email onto old mail server.
I do *NOT* want this machine to decide which mail is valid, and which mail is invalid. I do not want to have to have a list of valid domains on the spam/av filter box. All the examples I can find for Postfix are for predefined domains using the translation table. I do not want to do this. I want to be able to add and remove domains in one place (on my mail server), and not need to reconfigure the spam/av gateway when I add a new domain.
Is this possible? It seems like I basically want to setup the machine as an open relay with a default relay host of my email server.
Thoughts/Ideas? |
|
Back to top |
|
|
kashani Advocate
Joined: 02 Sep 2002 Posts: 2032 Location: San Francisco
|
Posted: Thu Jun 17, 2004 10:20 pm Post subject: |
|
|
If you're using MySQL for the backend of your mail system there is no reason you shouldn't be able to also do a query on the spam/av server as well to find out which domains you want to accept mail for. If you're not using MySQL, now might be a good time to do it. With 100+ domains it does make some sense to go to a larger more complicated infrastructure as it simplifies things like this.
http://www.gentoo.org/doc/en/virt-mail-howto.xml
This is the Gentoo Virtual Mail server guide. You can probably crib what you need for the spam/av server out this... the Postfix/MySQL part and skip the rest.
Also don't skim on the RAM for the spam/AV server. Doing filtering tends to be less about disk I/O and more about raw CPU and RAM. Regular mail servers tend to be disk I/O bound.
kashani _________________ Will personally fix your server in exchange for motorcycle related shop tools in good shape. |
|
Back to top |
|
|
|