|
Just
show us any other zone (or a couple). The DNS records necessary to "walk
through" a DNS lookup, and maybe spot a loop or something.
As to
to he Host Aliases on the virtual domain definition "General" page, it does
indeed make the host header get honored. It sure isn't in the book or help!
THANKS MUCHO! I'm so tired of having to type the domain when I can see it in the
browser address line. btw, all my (20 or so) domains are on port 80, on the same
IP. I use port 81 for management (I couldn't remember 8181 either!).
Interestingly, this server is a W2K server with DNS on it<g>. I have 3
DNS, the Imail box (Primary DNS - public 63.171.93.0/27), another member server
(Secondary DNS Public 63.171.93.0/27) and a Domain Controller (Active
Directory Integrated Primary - Private 172.27.0.xx - DNS), all behind
a firewall. Except for the firewall, sounds like your place!
The
CNAME for Administration Ease is definitely a good thing. But crossing Zones,
it's an even better thing. I was thinking your "client" domains were
sub-zones of geo.net.co, not independent (you said you had other zone files. I
just thought you'd cut off your ONLY zone file before the "clients" got
defined).
In a
large zone file with CNAMES only to itself, you'd be polite to use A records. In
a distrubuted system where zone files use names in a different zone, the
CNAME is very appropriate (Unless one is debugging a performance
issue<g>). Might try a zone with all A records, just for
grins.
SPF is
an upcoming Sender Policy Framework to stamp out spam. It's trivial to publish
your authorized sender IPs in DNS. It's somewhat more involved to actually read
other folks SPF records, but publishing is easy and should be
done.
Did
you read the DNS Report? There are some other pointers about your zone you may
want to address. Here's a link on SPF (http://spf.pobox.com/)
Is .12
in the same box as .11? You got any routers? Have you checked the event logs for
IP conflicts?
Dan
Hi Dan, well, just tell me wich zon you need the
extra info.
About using webmail at 80 port, we had it that
way and same thing, had to pass it to 8383 again this week, so we can redirect
all th MAIL aliases from our customers to other WEB:80 that currently
redirects to our IMAIL:8383 server so we can "force" the users to get catched
up with the geo.net.co:8383 webmail, wich doesnt hangs the CPU.
About the host headers, i think thats an extra
from Imail, you just put at the vhost configuration screen, at the HOST
ALIASES, imail.domain.com and you put a CNAME (OR A-RECORD) pointing to your
servers IP address. At that stage, everytime a user goes to
http://imail.domain.com :8383 (or any of your imail webmail setting port),
imail will catch the headers (And add them to the logging proceess), wich
simplifies the loggin stage (Try it, its cool if your system doesnt behave
like mine! now i have to make all of them type their domain).
Basically I use CNAMES because if we have some
migration, we only need to change 1 record, basically thats the
reason.
I dont get this (sorry!)
No SPF text seen. (A simple TXT
record of "v=spf1 +mx -all" will do.
----- Original Message -----
Sent: Thursday, October 14, 2004 5:26
PM
Subject: RE: [IMail Forum] Bizarre
problem with WebMail + DNS + W2k
Several things come to mind.
a)
No Firewall? Sounds risky.
b)
You don't show any examples of the other DNS entries. You stopped just when
it was about to get interesting.
c)
If there's not a webserver on this do-everything box, you can put IMail on
port 80 and simplify everybodies life.
d)
Your zone serial number should be in the form yyyymmddxx, looks like the 4
got dropped.
e)
CNAMES cost extra references. Unless there is a good administrative reason
for using them (like you don't control both the name and alias), you should
just use A records.
f)
No SPF text seen. (A simple TXT record of "v=spf1 +mx -all" will
do.
h)
How do you get IMail to notice the Host headers? I'd like to do that. I make
my users type the whole thing! I thought you had to use separat IPs but that
would be A records, no CNAMEs.
Dan
Hi there:
Well, after a full week reinstalling and
reinstalling and looking up for some help, we found the following
strange thing with our system.
We do a clean installation of webmail on our
server (IBM Xserier 235, 2 Xeon x 3.2 Ghz, 2GB RAM), with Windows 2000
Server, MS DNS Server, Fprot, Declude AV, Declude Hijack.
The server is the Primary DNS Server of our
Network.
The Imail server, responds to hostname
(geo.net.co)
(geo.net.co) is configured as a Primary zone
in our DNS. (Remember that the DNS server runs on the SAME Imail
Server).
geo.net.co has the following created records
(I think this is not ok, so if you see some missleading, thanks!,
)
;
; Database file geo.net.co.dns for
geo.net.co zone.
; Zone version:
2001042332
;
@
IN SOA ns1.geo.net.co. hostmaster.geo.net.co.
(
2001042332 ; serial
number
3600 ;
refresh
3600 ;
retry
86400 ;
expire
86400 ) ; minimum TTL
; Zone NS records
@
NS dns1.geo.net.co.
@
NS ns1.geo.net.co.
@
NS ns2.geo.net.co.
@
NS imail.noc-geonet.com.
@
NS dns2.geo.net.co.
; Zone records
@
A 200.124.168.11
@
MX 10 ns1.geo.net.co.
dns1
A 200.124.168.11
dns2
A 200.124.168.11
ns1
A 200.124.168.11
ns2
A 200.124.168.12
smtp
CNAME dns1.geonetsa.com.
pop3
CNAME dns1.geonetsa.com.
So, at this server, i have like 200 Virtual
domains, i make an CNAME record at each one, pointing at geo.net.co so
when they log in to the webmail, they dont have to use @domain.com
appended to the username.
The strange thing
is:
When i use http://200.124.168.11:8383 for
logging in to my Webmail, using the perfmon i see that iwebmsg only uses
like 10% of the cpu for the complete logon process, but if i use for
example http://mail.domain.com:8383, the
cpu goes nuts, like 90-100% of ussage for like 3 seconds that is the time
of the complete logon process.
So, the only way that the cpu, doesnt hang is
if I use: http://200.124.168.11:8383 or
Any ideas???
Sergio Rinc�n Jaramillo
Ingeniero Telem�tica
GeoNet S.A.
TEL (574)
5104701 Fax (574) 2350160
L�nea �nica de Atenci�n al Cliente
3500111
Calle 34B N� 66� 42, Medell�n, Colombia
Ya visit�
nuestro sitio www.geo.net.co
Las opiniones
que se expresan en este e-mail son personales y no necesariamente
coinciden con las de GeoNet S.A. Este e-mail y todos los archivos
transmitidos en �l, incluidas las respuestas y los reenv�os (que pueden
incluir modificaciones) son confidenciales y de uso exclusivo del
destinatario original, no se debe revelar ni utilizar por una persona
distinta al destinatario ni copiar por medio
alguno.
|
