----- Mensaje original ----- De: "ArcosCom Linux User" <[EMAIL PROTECTED]> Para: <[email protected]> Enviado: Martes, 15 de Julio de 2008 06:01 p.m. Asunto: Re: [qmailtoaster] TOASTER SERVER in a DMZ
El Mar, 15 de Julio de 2008, 18:59, Jake Vickers escribió: > ArcosCom Linux User wrote: >> I need to put a toaster server into a DMZ subnet. >> >> The IDEA is this: >> >> INTERNET - GW - DMZ >> | >> LAN >> >> And the TOASTER server be used from LAN and FROM internet. >> I need some help about questions I have about this: >> 1) I have my DNS server (hosting my domain) in the DMZ network and >> appears to be working fine. The question is: How need I configure the >> SPF (and any other DNS registers) in my domain to works fine for the >> LAN and the INTERNET? I have 3 public IPs (in loadbalancing >> configuration). >> 2) How I need to configure qmail to allow the WAN and LAN domain be >> used as one domain? >> 3) How I need to configure qmail to allow send e-mails from my LAN >> subdomains (the servers in DMZ sends e-mails to internet in the form >> root@<machine>.<lan_domain>). >> >> If you know any usefull link (or more) that allow me learn how to do >> this, >> please, send!! >> > > Don't know of any links.... > You'll set your SPF records up for whatever public IP you're using. > There's some instructions on the wiki I believe on how to set the SPF > records up. Let me know if they are not there. As far as setting up > the rest of your DNS, that's a big order and a lot can be opinion. If > you have 3 public IPs and a load balancer, I'd list all 3 IPs in a > round-robin configuration in DNS and let the load balancer work for it's > money. Others may do it different. > Qmail will not care about the LAN/WAN. It doesn't really deal with IP > addresses in this sense; it deals with accounts. If they have an > account, they can send/receive emails. Shouldn't matter where they're > coming from. > I don't understand #3. Can you explain what you're trying to accomplish? Yes, I can. The idea is that all servers has, by default, the domain <machine>.<lan_domain>. Then, when I send and e-mail using "mail" from the server (as root, for example), it will send from root@<machine>.<lan_domain>. The problem I have is how to allow toaster machine to receive this e-mails from internet (not directly from LAN), knowing that these machines are allowed to send e-mails in their own subdomains. The question is ¿Need I any DNS considerations about these subdomains? and/or ¿Need I any toaster machine considerations too? The problem I encounter is when these machines (in the same LAN) uses another gateway to connect to internet, that is the reason for this question. >>>>>>>>>>>> Hi, In this deal, as you need to send emails from each server in your intranet "server.lan_domain" to other email server in the internet, you will need to have a "real" domain, and create a subdomain with the name of each server you have. if you need to receive reply from internet to an email box for each subdomain, you have to create each subdomain.real_domain.com in the qmail server. as you have "[EMAIL PROTECTED]" you can add the email header "REPLY-TO: [EMAIL PROTECTED]" so you can receive replyes. or you can add REPLY-TO: [EMAIL PROTECTED], so you need to create one domain only in your qmail server, and one email box for each server. another thing is if your send your emails with [EMAIL PROTECTED] when another server receives it, it will check the domain exists, the MX and SPF records, and all other things to try determine if the sender have a valid domain. So I recommend you to use [EMAIL PROTECTED] for all your sends (or [EMAIL PROTECTED]). I hope this help you. Mario Ochoa > > --------------------------------------------------------------------- > QmailToaster hosted by: VR Hosted <http://www.vr.org> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
