help with a backup mail server

The actual situation: we have a CentOS mail server (dovecot/postfix with
amavis) that IMO need to be secured (3rd party configured without ssl T_T)

The goal: a primary mail server secures with ssl (CentOS
dovecot/postfix) and a secondary mail server with openSUSE 12.1 and postfix

so the DNS record have to be edites to:

IN MX 10 mail.domain.com
IN MX 20 mail2.domain.com

and the mail2 /etc/postfix/main.cf to


myhostname = mail2.domain.com
mydomain = domain.com
myorigin = $mydomain
inet_interfaces = all
mydestination = mail2.domain.com
mynetworks = 127.0.0.1 mail2_IP
relay_domains = domain.com, $mydestination
relay_recipient_maps =
queue_run_delay = 200s
content_filter = smtp-amavis:[127.0.0.1]:10026

but I have a lot of questions…
is right that? the mail2 server need the same users as mail?

is right that? the mail2 server need the same users as mail?

If you mean linux users, no.

You do not say what the purpose of the secondary server is.
As the primary has Dovecot, but not the secondary I presume that mail-clients will not interact with the secondary. The secondary is to provide an alternative network route to the primary, spool incoming mail when the primary is busy, unavailable, and/or share the spam-filtering load.

The secondary does need to know which mail addresses to accept’ This probably means that the secondary relay_recipients need to correspond to the primary virtual table/db.

The secondary needs similar spam prevention measures to the primary, as it will receive propotionately more attention from malware peddlers.

You should be familiar with the Postfix documentation before configuring a mail-server.

eng-int wrote:
> As the primary has Dovecot, but not the secondary I presume that
> mail-clients will not interact with the secondary. The secondary is to
> provide an alternative network route to the primary, spool incoming mail
> when the primary is busy, unavailable, and/or share the spam-filtering
> load.
Thats the idea, the secondary only spool the mail and send it to the
primary when it comes online again