[86875] in North American Network Operators' Group
Re: Outbound mail filtering on large mail / web server farms - just an idea or two that I have
daemon@ATHENA.MIT.EDU (Suresh Ramasubramanian)
Mon Nov 21 01:21:54 2005
Date: Mon, 21 Nov 2005 11:51:23 +0530
From: Suresh Ramasubramanian <ops.lists@gmail.com>
To: Michael Loftis <mloftis@wgops.com>
Cc: nanog@nanog.org
In-Reply-To: <646A8BB4CF04C1DE02B31FAB@dhcp-2-206.wgops.com>
Errors-To: owner-nanog@merit.edu
On 11/21/05, Michael Loftis <mloftis@wgops.com> wrote:
> Oh I understand the concept perfectly well. It's just that I can't see
> through to an implementation easily. The system I'm referring to has no
> internal way of telling the difference easily between forwarded mail and
> 'other' mail, it's all passed into the same set of virtual tables and the
> only difference is local versus remote delivery. I can't classify .forwa=
rd
Separate your MXs from your outbound servers
And have local traffic rewritten to an internal domain (say
wgops.com.internal) just for local delivery .. all other outbound
traffic on your MXs can be assumed to be either
* Bounces [route em out of a separate host as well - tracking those
helps block a ton of spam]
* Forwarded emails
Your outbounds of course go out via a separate set of boxes.
Multiple machines. Or multiple postfix instances on the same box. Whatever
--srs
