[isalist] Re: SMTP Outbound from different IP addresses
- From: "Rob Moore" <RMoore@xxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Mon, 10 Mar 2008 10:58:00 -0400
That's exactly what happened to us. A new blacklist (CBL, I think)
decided that our listserver was incorrectly configured, because it was
sending mail from the same IP address as our email server. So they
blacklisted us. This despite the fact that it's been configured that way
for months and months.
Rob
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Paul Laudenslager
Sent: Sunday, March 09, 2008 12:48 AM
To: isalist@xxxxxxxxxxxxx
Cc: 'Virginia Internet Services Support'
Subject: [isalist] Re: SMTP Outbound from different IP addresses
I've got 20+ mail servers behind ISA2k6 and they ALL show the same IP to
the destination mail servers.
I've never been able to figure out how to get them to show up as
different outgoing IP's. It's always the IP of the firewall.
That does cause problem when one reseller gets blacklisted, it effects
all the mail servers behind that particular firewall.
If you find a workaround for this, I'd be more than interested.
Good Luck!
-Paul
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Rob Moore
Sent: Tuesday, March 04, 2008 2:26 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Outbound from different IP addresses
That's kind of what I gathered so far.
Rob
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of William Holmes
Sent: Tuesday, March 04, 2008 2:16 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Outbound from different IP addresses
Hello,
If you are passing the SMTP traffic from both servers outbound through
the same ISA server then I don't believe that this is possible without
some additional hardware.
Bill
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Rob Moore
Sent: Tuesday, March 04, 2008 10:26 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Outbound from different IP addresses
That's correct. My goal is to have all mail going to the outside world
from our mail server come from one public IP address, and all the mail
coming from our list server come from another public IP address. Traffic
from both goes through the ISA server in both directions.
Currently SMTP inbound traffic comes to the mail server on one address
and to the list server on another address. I'd like to be able to do the
same thing for outbound traffic.
Rob
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jerry Young
Sent: Tuesday, March 04, 2008 10:07 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Outbound from different IP addresses
T,
I read it differently. I thought the goal was to have them send using
DIFFERENT IP addresses so that if one gets black listed, the other two
would still be "good".
On 3/4/08, Thor (Hammer of God) <thor@xxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
Receiving is easy... The goal was for all of them to SEND with the same
IP, which you can't guarantee with ISA using multiple IPs on the
external interface.
t
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx] On Behalf Of Han Valk
> Sent: Tuesday, March 04, 2008 5:39 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Mmm I asumed that those SMTP serverd also needed to receive SMTP
> traffic.
>
> ________________________________
>
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Jerry Young
> Sent: Tue 3/4/2008 1:36 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
>
>
> I think this was for outbound traffic, not inbound.
>
> How would you ensure that the IP address ISA used to send mail to the
> Internet changed? I can't think of any way it could; unless it can do
> a
> one-to-one NAT.
>
> A non-ISA server solution is available, though.
>
> Three mail gateways with external interfaces on them are used in the
> mail
> traffic path both inbound and outbound. ISA could then sit between
> them.
>
> Would require 3 MX records, though, and some modification of the
> Exchange
> SMTP Connector (assuming Exchange inside) to use the mail gateways as
> smart
> hosts.
>
> Mail flow would then go Internet -> Mail Gateways -> ISA -> Exchange
> for
> inbound and Exchange -> ISA -> Mail Gateways -> Internet for outbound.
>
> Could get more clever with load balancing on either side but I figured
> less
> complexity with this example would help make it easier to understand.
> :)
>
>
> On Tue, Mar 4, 2008 at 5:45 AM, Han Valk <Han.Valk@xxxxxxxxxxxxxxx>
> wrote:
>
>
> http://www.ISAserver.org <http://www.isaserver.org/>
> -------------------------------------------------------
>
> Why not? Configure 3 different IP addresses on the external NIC.
> Configure 3
> different SMTP server publishing rules each pointing to
different
> IP
> address
> on the external NIC.
>
> ________________________________
>
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
> Sent: Mon 3/3/2008 6:06 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
>
>
> Hi Rob,
>
> That would be a nice feature. But no, you can't do that.
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org <http://www.isaserver.org/>
> <http://www.isaserver.org/>
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
> MVP -- Microsoft Firewalls (ISA)
>
>
>
>
> ________________________________
>
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
> Sent: Monday, March 03, 2008 10:47 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] SMTP Outbound from different IP
> addresses
>
>
> Hello all-
>
> ISA 2006 Standard.
>
> I'm guessing this is a fairly simple question. Hope so,
> anyway.
>
> We have three servers that do SMTP outbound. Is there a
> way to
> have
> each one send SMTP traffic from a different IP address on our
one
> ISA
> server?
> I'd like to isolate them to different IP addresses so when one
> gets
> blacklisted (as happened over the weekend) they don't all get
> blacklisted.
>
> Thanks,
> Rob
>
>
>
> ++++++++++++++++++++++++++++++++++++
>
>
> May your life preach more loudly than your lips.
> --William Ellery Channing
>
>
> ++++++++++++++++++++++++++++++++++++
>
>
> ________________________________
>
> Never miss a thing. Make Yahoo your homepage.
> <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs
<http://us.rd.yahoo.com/evt=51438/*http:/www.yahoo.com/r/hs> >
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com <http://www.techgenix.com/>
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>
>
>
> --
> Cordially yours,
> Jerry G. Young II
> Microsoft Certified Systems Engineer
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer
Other related posts:
