[SA-exim] synchronizing tuplets between multiple mtas

[Jeremy Hockin]

Thanks for all the input you guys.  I do only have 2 mtas here running greylisting, so for the moment I'm going to not synchronize the tuplets until I give it a few days and see how many legitimate emails get lost in the ether.  Then I think I will make an attempt with the cron job and rsync.


-----Original Message-----
From: Kilian Krause [mailto:kk at verfaction.de] 
Sent: Thursday, April 21, 2011 11:35 AM
To: sa-exim at lists.merlins.org
Cc: Jeremy Hockin; sa-exim at lists.merlins.org
Subject: Re: [SA-exim] synchronizing tuplets between multiple mtas

Marc,

On Thu, 2011-04-21 at 07:20 -0700, Marc MERLIN wrote:
> On Thu, Apr 21, 2011 at 03:12:12PM +0200, Kilian Krause wrote:
> > if you have an NFS available in your LAN, why not use that as shared
> > storage?
> 
> I think most folks don't like to have NFS on their DMZ, or on internet
> facing servers :)

I was just making the point you *could* use a shared storage in case you
would be having one. There was no mentioning of having it face the
internet (or even having it routed beyond the LAN in any way). My idea
was just to contrast the idea of actively syncing the files with
something that would be doing this by design already (like an FC LUN
using a cluster filesystem or NFS). Moreover you would of course want
proper firewalling in place anyway.

IMHO pulling out the storage to another (implicitly linked) layer will
reduce the likelyness of introducing more problems than you're trying to
solve - given that you would already be having one readily available.

If you're just talking an empty DMZ with these two servers then *only
for the greylisting* rsync may be a good idea.

-- 
Best regards,
Kilian