> incoming
> --> port 25 --> (pub)assp(prv) --> mta on private box (listening on
25)
> assp box runing iptables

> outgoing
> mta on private box (sending on 25) -- assp's box(with ASSP relaying
turned
> off) -->out public interface to destination NOT via ISP mta

hmmm sounds like you're missing some bits and pieces; as you
described things above, the ASSP box has two IP addresses, a
public one and a private one and the MTA is on a separate box
with another private IP... ok

Let's say the ASSP box has the following IPs:

public:    125.1.1.1
private:   10.0.0.1

and let's also say that the MTA has the following IP

10.0.0.2

now, setup ASSP this way

* network setup:

listenport   125.1.1.1:25
smtpdestination 10.0.0.2:25

so that incoming email will hit the ASSP public interface and then
ASSP will proxy it to the backend email server at 10.0.0.2:25; now
incoming should be ok, let's look at outgoing ... and here you're
missing a "piece" :)

install an SMTP engine on the ASSP box (postfix or whatever)
and configure it to listen on 10.0.0.1:125, it will be your SMTP
relay

now configure the following ASSP parameters

* relaying

acceptallmail    10.0.0.1|10.0.0.2
relayhost            10.0.0.1:125
relayport             10.0.0.1:25

the above means that ASSP will allow relaying from 10.0.0.1 and
10.0.0.2, it will listen and relay messages coming to 10.0.0.1:25
and such messages will be proxied to 10.0.0.1:125 where the
SMTP relay will pick and route them to destination

next, setup your MTA so that for external delivery it will use the
smarthost at 10.0.0.1:25 (where ASSP relayport is bound)

at this point, your outbound mail flow will look as follows

MTA -> 10.0.0.1:25 -> 10.0.0.1:125 -> external destination

this way ASSP will directly handle both incoming and
outgoing email, the latter will use the SMTP relay for
delivery; at this point, in case you'll still need to use
an external smarthost you'll just need to configure
the SMTP relay to use it w/o touching your ASSP
configuration



------------------------------------------------------------------------------
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to