[isalist] Re: SMTP Outbound from different IP addresses

  • From: "Rob Moore" <RMoore@xxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 4 Mar 2008 10:25:55 -0500

That's correct. My goal is to have all mail going to the outside world
from our mail server come from one public IP address, and all the mail
coming from our list server come from another public IP address. Traffic
from both goes through the ISA server in both directions.

 

Currently SMTP inbound traffic comes to the mail server on one address
and to the list server on another address. I'd like to be able to do the
same thing for outbound traffic.

 

Rob

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jerry Young
Sent: Tuesday, March 04, 2008 10:07 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Outbound from different IP addresses

 

T,

 

I read it differently.  I thought the goal was to have them send using
DIFFERENT IP addresses so that if one gets black listed, the other two
would still be "good".

 

On 3/4/08, Thor (Hammer of God) <thor@xxxxxxxxxxxxxxx> wrote: 

http://www.ISAserver.org
-------------------------------------------------------

Receiving is easy... The goal was for all of them to SEND with the same
IP, which you can't guarantee with ISA using multiple IPs on the
external interface.

t


> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx] On Behalf Of Han Valk
> Sent: Tuesday, March 04, 2008 5:39 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Mmm I asumed that those SMTP serverd also needed to receive SMTP
> traffic.
>
> ________________________________
>
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Jerry Young
> Sent: Tue 3/4/2008 1:36 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
>
>
> I think this was for outbound traffic, not inbound.
>
> How would you ensure that the IP address ISA used to send mail to the
> Internet changed?  I can't think of any way it could; unless it can do
> a
> one-to-one NAT.
>
> A non-ISA server solution is available, though.
>
> Three mail gateways with external interfaces on them are used in the
> mail
> traffic path both inbound and outbound.  ISA could then sit between
> them.
>
> Would require 3 MX records, though, and some modification of the
> Exchange
> SMTP Connector (assuming Exchange inside) to use the mail gateways as
> smart
> hosts.
>
> Mail flow would then go Internet -> Mail Gateways -> ISA -> Exchange
> for
> inbound and Exchange -> ISA -> Mail Gateways -> Internet for outbound.
>
> Could get more clever with load balancing on either side but I figured
> less
> complexity with this example would help make it easier to understand.
> :)
>
>
> On Tue, Mar 4, 2008 at 5:45 AM, Han Valk <Han.Valk@xxxxxxxxxxxxxxx>
> wrote:
>
>
>       http://www.ISAserver.org <http://www.isaserver.org/>
>       -------------------------------------------------------
>
>       Why not? Configure 3 different IP addresses on the external NIC.
> Configure 3
>       different SMTP server publishing rules each pointing to
different
> IP
> address
>       on the external NIC.
>
>       ________________________________
>
>       From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
>       Sent: Mon 3/3/2008 6:06 PM
>       To: isalist@xxxxxxxxxxxxx
>       Subject: [isalist] Re: SMTP Outbound from different IP addresses
>
>
>       Hi Rob,
>
>       That would be a nice feature. But no, you can't do that.
>
>       Thomas W Shinder, M.D.
>       Site: www.isaserver.org <http://www.isaserver.org/>
> <http://www.isaserver.org/>
>       Blog: http://blogs.isaserver.org/shinder/
>       Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
>       MVP -- Microsoft Firewalls (ISA)
>
>
>
>
>       ________________________________
>
>              From: isalist-bounce@xxxxxxxxxxxxx
>       [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
>              Sent: Monday, March 03, 2008 10:47 AM
>              To: isalist@xxxxxxxxxxxxx
>              Subject: [isalist] SMTP Outbound from different IP
> addresses
>
>
>              Hello all-
>
>              ISA 2006 Standard.
>
>              I'm guessing this is a fairly simple question. Hope so,
> anyway.
>
>              We have three servers that do SMTP outbound. Is there a
> way to
> have
>       each one send SMTP traffic from a different IP address on our
one
> ISA
> server?
>       I'd like to isolate them to different IP addresses so when one
> gets
>       blacklisted (as happened over the weekend) they don't all get
> blacklisted.
>
>              Thanks,
>              Rob
>
>
>
>              ++++++++++++++++++++++++++++++++++++
>
>
>              May your life preach more loudly than your lips.
>              --William Ellery Channing
>
>
>              ++++++++++++++++++++++++++++++++++++
>
>
>       ________________________________
>
>              Never miss a thing. Make Yahoo your homepage.
>       <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs
<http://us.rd.yahoo.com/evt=51438/*http:/www.yahoo.com/r/hs> >
>
>       ------------------------------------------------------
>       List Archives: //www.freelists.org/archives/isalist/
>       ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
>       ISA Server Blogs: http://blogs.isaserver.org/
>       ------------------------------------------------------
>       Visit TechGenix.com for more information about our other sites:
>       http://www.techgenix.com <http://www.techgenix.com/>
>       ------------------------------------------------------
>       To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>       Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>
>
>
> --
> Cordially yours,
> Jerry G. Young II
> Microsoft Certified Systems Engineer
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx




-- 
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer 

Other related posts: