Postfix Backup mx configuration

Posted on 2010-11-26
Last Modified: 2012-06-21
Hi there.

I have a backup mx using postfix at the moment, it is set to route the primary mx of domains using transport mapping.

Is there a way I can tell postfix to deliver only to the primary mx rather than manually mapping it every time?

Thanks in advance.
Question by:alexanderfoti
  • 3
  • 3
LVL 19

Expert Comment

ID: 34220559
In the DNS entries for the MX records use a high priority (smaller number) for the primary

Author Comment

ID: 34221487
I think you have misunderstood the question, or I have worded it badly.

At the moment, I already have domains with this postfix server as their second MX.

if I dont implement a transport map, the server will try to deliver to their primary mx, fail (As its down etc) then try to deliver to the second mx which is itself.

It will then go into a mail loop. To prevent this, I have transport maps setup to tell postfix only to send to the primary mx. Whilst this works, it means I need to add it in to the configuration everytime I add a domain.

Is there a way in the config of postfix to tell it to only send to the first mx?
LVL 19

Accepted Solution

bevhost earned 500 total points
ID: 34221558
The name that you use in the secondary MX, does postfix recognise that as itself?
eg if postfix is behind a NAT gateway, then the MX record will resolve to a IP address that is not bound to the postfix server.
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.


Author Comment

ID: 34221957
No - the server is behind a nat and doesnt recognise it as itself, but, another server I have that ISNT behind a nat behaves in the same way
LVL 62

Expert Comment

ID: 34226457
all mailers should be identical.
some use lowest order mailer to catch spam and make dynamic blacklisting.
LVL 19

Assisted Solution

bevhost earned 500 total points
ID: 34226596
Why do you need a backup MX?
Is the primary connected by dialup? or some other non permanent connection?

Why not allow the mail to queue on the sending MTA?
At least the sender will have some chance of knowing that the mail is not beling delivered yet.

As for why postfix is behaving this way I'm not sure, I would not configure this scenario for the reasons above.  In the MX records, do you use the actual hostname of the backup mx server, (ie the one with the matching forward and reverse DNS entries?) or are you using alias names from the domain you are doing backup MX for.?

Author Closing Comment

ID: 34295526
Thanks - The Backup MX's are provided as a service to prevent end users getting bounecbackswhen a client's site is down from non RFC conforming mail servers.

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
linux, squid, exchange 14 179
Website content filtering at different level 5 93
Linux on a Dell PowerEdge 720 3 160
Install XRDP on Ubuntu Server 16.10 x64 3 59
I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
The purpose of this article is to fix the unknown display problem in Linux Mint operating system. After installing the OS if you see Display monitor is not recognized then we can install "MESA" utilities to fix this problem or we can install additio…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question