RES: RE: RES: RE: Multiple SMTP relay servers - Pos sible Solution?

  • From: "Tiago de Aviz" <Tiago@xxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 21 Jul 2004 18:31:23 -0300

Well, i guess the correct would be: your IIS uses its own DNS server, put a 
secondary zone of your internal domain, and set it to forward to external DNS's 
in the DNS Server properties.

 

Tiago de Aviz

SoftSell

(41) 340-2363

www.softsell.com.br <http://www.softsell.com.br/> 

 

Esta mensagem, incluindo seus anexos, tem caráter confidencial e seu conteúdo é 
restrito ao destinatário da mensagem. Caso você tenha recebido esta mensagem 
por engano, queira por favor retorná-la ao destinatário e apagá-la de seus 
arquivos. Qualquer uso não autorizado, replicação ou disseminação desta 
mensagem ou parte dela é expressamente proibido. A SoftSell não é responsável 
pelo conteúdo ou a veracidade desta informação.

  _____  

De: Chris Wall [mailto:Chris.Wall@xxxxxxxxxxxxxxxxxxx] 
Enviada em: quarta-feira, 21 de julho de 2004 17:47
Para: [ExchangeList]
Assunto: [exchangelist] RE: RES: RE: Multiple SMTP relay servers - Pos sible 
Solution?

 

http://www.MSExchange.org/

One last stupid question -- 

 

In IIS, since the server is set to use an external DNS server, should I just 
type in the FQDN of the internal DNS server or its IP in []'s where it asks for 
the Smart Host information?   I assume that I can not simply select the 'Use 
DNS' radio button.

 

Sorry to be so stupid on this, but I am confused on how to get the IIS to point 
back into the internal DNS since it is setup to reference the External DNS 
server in the TCP/IP settings of the NIC.  

 

Enough hand holding...  Time to experiment in the lab I guess.  Thanks for all 
of the info and suggestions.  I will be open to any other suggestions though :)

 

  _____  

From: Lara, Greg [mailto:GLara@xxxxxxx] 
Sent: Wednesday, July 21, 2004 4:16 PM
To: [ExchangeList]
Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers - Pos sible 
Solution?

http://www.MSExchange.org/

Chris, you don't need to point your relay to both IMCs, you get get the same 
effect you want by using round-robin entries in DNS. Create two host entries 
with the same name, each one pointing to a different Exchange server. The DNS 
server will return alternate IP addresses with each query. Then, point your 
SMTP relay to that hostname.

Greg Lara
-------------------------------------------------------------------------------------------------------
This e-mail message may contain privileged, confidential and/or proprietary 
information intended only for the person(s) named. If you are not the intended 
recipient, please destroy this message, and any attachments, and notify the 
sender by return e-mail. If you are not the intended recipient(s), or the 
employee or agent responsible for delivering the message to the intended 
recipient(s), you are hereby notified that any dissemination, disclosure or 
copying of this communication is strictly prohibited.
-------------------------------------------------------------------------------------------------------
 

 

         

        
  _____  


        From: Chris Wall [mailto:Chris.Wall@xxxxxxxxxxxxxxxxxxx] 
        Sent: Wednesday, July 21, 2004 4:06 PM
        To: [ExchangeList]
        Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers - Pos 
sible Solution?

        http://www.MSExchange.org/

        I plan on using one of the GFI relay servers as a primary (all services 
running such as whitelisting, Bayesian, DNS Lookup, Virus Scanning, Keyword and 
Attachment blocks, etc...) the other server will only be configured to use 
keyword blocks, attachment blocks and virus scanning.  This is only for 
failover purposes so the secondary does not have to be as restrictive.  I look 
at it this way - it is better to have too much e-mail coming into the 
organization than none at all, as long as it is being scanned for virus', 
attachment types and some keywords.  

         

        So far, for my overall solution I have this:

         

        Set the internal Exchange servers (with IMS running) to use internal 
DNS to deliver mail to the weighted MX records pointing to GFI SMTP Virtual 
Servers in the DMZ.  Then the GFI SMTP Virtual Servers will reference external 
DNS for final external mail delivery....

         

        Now I have to find a way for internal mail to have redundancy.  Using 
IIS 6 or 5 on the SMTP Virtual Servers in the DMZ, I need to find a way to have 
them deliver to either of the internal Exchange servers in case the primary IMS 
is not available on one of the Exchange servers.  I have received several 
responses telling me to have the SMTP Virtual Servers deliver mail using DNS.  
I can not do this as the SMTP Virtual Servers are pointing to an external DNS 
server.  Can I set Smart Hosts on the SMTP Virtual Servers to send mail to two 
IP address in IIS?  If not, I have a single point of failure for mail coming 
into my organization if the Smart Host fails...

         

        If I can specify two IP's in the IIS Smart Host field for my domain 
(for example [172.16.1.1; 172.16.1.2] )  would this work?  Or is this not 
possible in IIS?

         

        Very confused now and I cant find anything that states I can set 2 IP's 
in the IIS Smart Host field.

         

        
  _____  


        From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
        Sent: Wednesday, July 21, 2004 3:47 PM
        To: [ExchangeList]
        Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers

        http://www.MSExchange.org/

        Hi Tiago,

         

        Good point! One location I worked with had 4 relays! One for 
MailEssentials, one for MailSecurity, One for iHateSpam and one for 
SpamAssisin. All inbound mail was run through all four relays before hitting 
the corporate Exchange Servers. Turned out to work pretty good and very few 
false positives and very little spam got it.

         

        I'll need to write up the configuration some day at www.msexchange.org.

         

        Thanks!

        Tom
        www.isaserver.org/shinder <http://www.isaserver.org/shinder> 
        Get the book!
        Tom and Deb Shinder's Configuring ISA Server 2004
        http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> 
        MVP -- ISA Firewalls


Tenha proteção contra vírus e spam para seu servidor de correio pagando
apenas uma pequena mensalidade! Veja os serviços de Gateway em 
www.softsell.com.br !

Other related posts: