Best configuration Backup MX

[Lgsitec]

Hi,

in our infrastructure there are two MX mounting proxmox. Obviously one is our Primary MX, the other is a Backup MX. We experienced some delay problems in the relaying of mails depending on greylisting ( that is configured on both).

My question is: What is the best configuration of a Primary and Backup MX both mountig Proxmox?

Thank you for answering.

 

[tom]

Hi,

in our infrastructure there are two MX mounting proxmox. Obviously one is our Primary MX, the other is a Backup MX. We experienced some delay problems in the relaying of mails depending on greylisting ( that is configured on both).

My question is: What is the best configuration of a Primary and Backup MX both mountig Proxmox?

Thank you for answering.

just to make clear:
you have two mx records pointing both to just one Proxmox server?

 

[Lgsitec]

No, I have two installations of Proxmox.

 

[tom]

Hi,

in our infrastructure there are two MX mounting proxmox. Obviously one is our Primary MX, the other is a Backup MX. We experienced some delay problems in the relaying of mails depending on greylisting ( that is configured on both).

My question is: What is the best configuration of a Primary and Backup MX both mountig Proxmox?

Thank you for answering.

can you specify and send logs regarding "...some delay problems..."?

 

[Lgsitec]

The problems are about greylisting, when my server reply 451 some smtp servers try to contact my backup MX receiving 451 error message..... is a sort of loop....

 

[tom]

The problems are about greylisting, when my server reply 451 some smtp servers try to contact my backup MX receiving 451 error message..... is a sort of loop....

please describe your setup in detail (including DNS MX settings) in order to have the whole picture here.

 

[Lgsitec]

DNS:

mx1.logostech.it MX priority 5 89.251.177.5
mx2.logostech.it MX priority 10 89.251.177.9

Greylisting enabled on both.

In this moment mx1 and mx2 are configured in the same way.

 

[Lgsitec]

So, MX2 relay mails to destination server and not to MX1 ( just to make the situation clear)

 

[tom]

So, MX2 relay mails to destination server and not to MX1 ( just to make the situation clear)

if the first Proxmox server rejects an email with greylisting the sending smtp tries the second Proxmox server and the second will also greylist. that behavior is ok.

Solution:
If you run two Proxmox servers to enhance HA you should configure them as a HA cluster - therefore the greylist database can be synchronized between the two servers.

 

[Lgsitec]

Ok, but i need a different type of license, or what else?

 

[Lgsitec]

Is there any type of work-around?

 

[tom]

Ok, but i need a different type of license, or what else?

yes, you need 2 Proxmox HA Cluster licenses.

 

[tom]

Is there any type of work-around?

1. Accept the delays due to greylisting on both servers
2. Use one Proxmox server and one MX record
3. Disable greylisting

 

[chopeta]

Looks like we need to move this thread into their appropriate forum.

 

[dietmar]

We experienced some delay problems in the relaying of mails depending on greylisting ( that is configured on both).

You will always have delays when you use greylisting (unless the sender has a valid spf record). Thats due to the algorithm. Or what exactly are your 'delay problems'? Its also quite normal (common) that both servers are contacted - so whats the problem?

- Dietmar