If you are trying to use Veeam, the standard setup would to have a server running a second copy of Veeam B&R at the target site. You'll link the two and configure the replicas. You do not need to purchase a second Veeam license to do this, but you will need a running B&R at the DR site.
That was my understanding of how it works, but it has been almost two years since I talked to Veeam about it.
With what I've seen with v9, you now can do full failover scripted ahead of time to make it a bit more turn-key during a disaster.
We run one OC system that is used for a client that has clients that need to move files to and from them from loaned hardware. It's a weird, complicated scenario. But OC works beautifully for it and has for years.
Related to the actual cause of the problem, I apparently was testing some SMTP stuff a while back and disabled my rule to block all SMTP outbound on my network, then forgot to turn it back on. That rule is enabled again, so now waiting to see when it gets hit to find out what the hell on my system is sending spam.
But, this still does not resolve the MS problem with the white listing until the CBL drops off.
I have Centurylink at home. I can do a quick check from there when I get home. Maybe unrelated, but I was having some severe issues with DNS a couple weeks back at home.
[10:54 jbusch ~]$ sudo dnf copr enable a15/NGINX-extras
[sudo] password for jbusch:
You are about to enable a Copr repository. Please note that this
repository is not part of the main Fedora distribution, and quality
may vary.
The Fedora Project does not exercise any power over the contents of
this repository beyond the rules outlined in the Copr FAQ at
<https://fedorahosted.org/copr/wiki/UserDocs#WhatIcanbuildinCopr>, and
packages are not held to any quality or security level.
Please do not file bug reports about these packages in Fedora
Bugzilla. In case of problems, contact the owner of this repository.
Do you want to continue? [y/N]:
Well at least you are adequately warned.
That was on my Fedora 25 (Korora) desktop. SO I know I cannot install it anyway.
Use Certbot never this method. keep your life simpler.
Yeah. If the old way is working, that should keep working. However, certbot is easier to use.
When my system came up for renew after certbot was out, I installed certbot and renewed that way. everything is in the same pace. nothing had to be changed in the config files.
Everything that you are doing sounds logical and makes sense to me. I'm pretty confident you are not going to hurt anything here. Will it help dramatically? No idea there. But I think it is likely to help without much risk. Seems like a good idea.