Nathanael Hoyle a écrit :
>
> I liked Jorey's idea enough to give it a shot.  Actually implemented it
> yesterday.  I debated about having the 'dead' MX host point at a system
> which dropped the requests but logged them (via iptables or similar),
> not so much to see how much legitimate email made it through (which
> seems to be pretty much all of it so far), but to see how much nasty
> traffic hit the primary 'dead' host that failed to retry on the second.
>  For now, I have gone with a somewhat different approach.  I actually
> have the primary MX listed as an IP that is a network boundary (and
> therefore flatly unusable),

what do you mean here?

   the advantage I see is that the connect
> attempt will fail notably faster than it would if it had to time out,
> which reduces the burden on legitimate hosts, but is still just as
> undeliverable, keeping the desired effect.  I will post with further
> results as I have the opportunity to observe them.
>