[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Domain setting when using multiple egress MTAs



Am 09.08.18 um 22:36 schrieb Rolf E. Sonneveld:
> Hi, all
> 
> when using multiple MTA's with the same function (smarthost routing mail from internal network to the Internet), what is the recommended approach re. the value of 'Domain' in the openarc.conf? Use something like mta1.domain.tld, mta2.domain.tld, mta3.domain.tld etc.? Or use something like mta.domain.tld on all outbound MTA's (all using the same private key)? I think, at the end of the day, the former is the approach best matching the goal of ARC, or? Any thoughts?


Hello Rolf,

good question!
I would say both versions are possible and not wrong. It depends on how similar you think, your MTA1...3 are.
Would you like to express, all host are similar, use a shared signing key.

Otherwise, one ARC signing key per mta don't hurt, add transparency and make automation easier.

Your choice...


Andreas


Follow-Ups:
Re: Domain setting when using multiple egress MTAs"Rolf E. Sonneveld" <R.E.Sonneveld@xxxxxxxxxxxxx>
References:
Domain setting when using multiple egress MTAs"Rolf E. Sonneveld" <R.E.Sonneveld@xxxxxxxxxxxxx>