OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Muliple Site single domain

From: Alexey Lobanov (A.Lobanovcro-rct.ru)
Date: Fri Feb 15 2008 - 02:12:15 CST


Hi Werner.

13.02.2008 22:45, Werner vd Merwe пишет:

> Currently we use dovecot IMAP / POP3 server, could you maybe please
> briefly elaborate on the downfall and options of this setup?

I had never dealt with Dovecot but I see no any difference at this level.

1. I really recommend to use direct LMTP to the destination IMAP server
as the second delivery stage. It simplifies the whole system, unloads
Postfix logs from unnecessary records, etc.

2. I am not sure that it is good to use LMTP over open Internet. Anyway,
I believe that *any* modern multi-site corporate setup MUST have VPN,
Virtual Private network structure. So, you can use internal domains and
IP-addresses for LMTP.

BTW, in my practice I have some sites without external IP-address. A
monopolistic ISP provides private-space IP to all small clients, and
allows TCP NAT for some ports. VPN way allows me to join such sites into
the whole system easily. Of course, such site cannot be an entry point
for mail, an MX :-). Same way works if a site has it's main link failed
and switches to a backup with dynamically allocated IP. OpenVPN.

Alexey