Discussion Locked

Setting up new mail server

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello, there was a recent question that asked how to set up an internal mail server. From my situation, I can only assume that I nat the external ip to the internal, and allow the associated port to go in/come out. Now, if the internal mail user's address is user@company.com, how do I create an mx record so that if I send from an external emaial address, it goes to that server/user. This leads me to believe that the firewall, based on the nat/rules, that all http goes to a web server, and all port 25 goes to the mail server. That seems hokey, and I would think you would need 2 external IP address' natted one-to-one. Hence, if I have 2 web servers, and 1 mail server, I would need 3 External IP address' because the firewall won't know which internal webserver to send/recieve the data. I think I am just coming into this at the wrong angle. Usually this stuff is easy for me to figure out, but, hey, it's Friday. Anyways, if I need an mx record from our dns provider, what would I ask for? There is already an mx record for the website, and I don't want to create an mx record with mail in the front, such as user@mail.company.com. Please relieve my brain!!!

Thanks, Darin

3 replies

by curacao_dejavu

for 1 web server and 1 mail server you just need 1 external ipadress.
The nat/rules will tel that port 80 goes to internal adress x and port 25 to internal adress y.

1 webserver can host multiple websites so that is not a problem, see the same solution as above.

if you really want to have 2 webserver most likely (95%) you will have to run the other webserver on another port (81) for example (that i am 100% sure and and when type the adress you have to add :81 to the end of the adress.

Now If you are running ISA server above paragraph may not be nesesary and you can use the wizard of isa server to accomplish that.

Leopold

by choppit

You only need 1 external address with 3 port forwarding rules as follows;

TCP 25 - mail server IP
TCP 80 - HTTP server1 IP
TCP 8? - HTTP server2 IP

Both HTTP sites can be hosted on the same server provided that they are listening on different ports. All domain records simply point to your WAN IP and the NAT firewall/router takes care of the rest.

by budthegrey

MX records for a domain are only supposed to point to host names, not an IP address. However, the MX record is for the domain, so even if the record points to mail.compnay.com (or www.company.com, or firewall.compnay.com or whatever), the mail addresses are still user@company.com)

Can the router that is providing NAT have multiple address on the internet side? If so, your problem is easy enough -- just add a second public IP and NAt to your second web server.

If the router can only have one public IP address, you'll have to put on on a non-standard port.

This discussion is closed to new replies.