El Mar, 15 de Julio de 2008, 18:59, Jake Vickers escribió: > ArcosCom Linux User wrote: >> I need to put a toaster server into a DMZ subnet. >> >> The IDEA is this: >> >> INTERNET - GW - DMZ >> | >> LAN >> >> And the TOASTER server be used from LAN and FROM internet. >> I need some help about questions I have about this: >> 1) I have my DNS server (hosting my domain) in the DMZ network and >> appears to be working fine. The question is: How need I configure the >> SPF (and any other DNS registers) in my domain to works fine for the >> LAN and the INTERNET? I have 3 public IPs (in loadbalancing >> configuration). >> 2) How I need to configure qmail to allow the WAN and LAN domain be >> used as one domain? >> 3) How I need to configure qmail to allow send e-mails from my LAN >> subdomains (the servers in DMZ sends e-mails to internet in the form >> root@<machine>.<lan_domain>). >> >> If you know any usefull link (or more) that allow me learn how to do >> this, >> please, send!! >> > > Don't know of any links.... > You'll set your SPF records up for whatever public IP you're using. > There's some instructions on the wiki I believe on how to set the SPF > records up. Let me know if they are not there. As far as setting up > the rest of your DNS, that's a big order and a lot can be opinion. If > you have 3 public IPs and a load balancer, I'd list all 3 IPs in a > round-robin configuration in DNS and let the load balancer work for it's > money. Others may do it different. > Qmail will not care about the LAN/WAN. It doesn't really deal with IP > addresses in this sense; it deals with accounts. If they have an > account, they can send/receive emails. Shouldn't matter where they're > coming from. > I don't understand #3. Can you explain what you're trying to accomplish?
Yes, I can. The idea is that all servers has, by default, the domain <machine>.<lan_domain>. Then, when I send and e-mail using "mail" from the server (as root, for example), it will send from root@<machine>.<lan_domain>. The problem I have is how to allow toaster machine to receive this e-mails from internet (not directly from LAN), knowing that these machines are allowed to send e-mails in their own subdomains. The question is ¿Need I any DNS considerations about these subdomains? and/or ¿Need I any toaster machine considerations too? The problem I encounter is when these machines (in the same LAN) uses another gateway to connect to internet, that is the reason for this question. > > --------------------------------------------------------------------- > QmailToaster hosted by: VR Hosted <http://www.vr.org> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
