One last stupid question -- In IIS, since the server is set to use an external DNS server, should I just type in the FQDN of the internal DNS server or its IP in []'s where it asks for the Smart Host information? I assume that I can not simply select the 'Use DNS' radio button. Sorry to be so stupid on this, but I am confused on how to get the IIS to point back into the internal DNS since it is setup to reference the External DNS server in the TCP/IP settings of the NIC. Enough hand holding... Time to experiment in the lab I guess. Thanks for all of the info and suggestions. I will be open to any other suggestions though :) _____ From: Lara, Greg [mailto:GLara@xxxxxxx] Sent: Wednesday, July 21, 2004 4:16 PM To: [ExchangeList] Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers - Pos sible Solution? http://www.MSExchange.org/ Chris, you don't need to point your relay to both IMCs, you get get the same effect you want by using round-robin entries in DNS. Create two host entries with the same name, each one pointing to a different Exchange server. The DNS server will return alternate IP addresses with each query. Then, point your SMTP relay to that hostname. Greg Lara ---------------------------------------------------------------------------- --------------------------- This e-mail message may contain privileged, confidential and/or proprietary information intended only for the person(s) named. If you are not the intended recipient, please destroy this message, and any attachments, and notify the sender by return e-mail. If you are not the intended recipient(s), or the employee or agent responsible for delivering the message to the intended recipient(s), you are hereby notified that any dissemination, disclosure or copying of this communication is strictly prohibited. ---------------------------------------------------------------------------- --------------------------- _____ From: Chris Wall [mailto:Chris.Wall@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, July 21, 2004 4:06 PM To: [ExchangeList] Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers - Pos sible Solution? http://www.MSExchange.org/ I plan on using one of the GFI relay servers as a primary (all services running such as whitelisting, Bayesian, DNS Lookup, Virus Scanning, Keyword and Attachment blocks, etc...) the other server will only be configured to use keyword blocks, attachment blocks and virus scanning. This is only for failover purposes so the secondary does not have to be as restrictive. I look at it this way - it is better to have too much e-mail coming into the organization than none at all, as long as it is being scanned for virus', attachment types and some keywords. So far, for my overall solution I have this: Set the internal Exchange servers (with IMS running) to use internal DNS to deliver mail to the weighted MX records pointing to GFI SMTP Virtual Servers in the DMZ. Then the GFI SMTP Virtual Servers will reference external DNS for final external mail delivery.... Now I have to find a way for internal mail to have redundancy. Using IIS 6 or 5 on the SMTP Virtual Servers in the DMZ, I need to find a way to have them deliver to either of the internal Exchange servers in case the primary IMS is not available on one of the Exchange servers. I have received several responses telling me to have the SMTP Virtual Servers deliver mail using DNS. I can not do this as the SMTP Virtual Servers are pointing to an external DNS server. Can I set Smart Hosts on the SMTP Virtual Servers to send mail to two IP address in IIS? If not, I have a single point of failure for mail coming into my organization if the Smart Host fails... If I can specify two IP's in the IIS Smart Host field for my domain (for example [172.16.1.1; 172.16.1.2] ) would this work? Or is this not possible in IIS? Very confused now and I cant find anything that states I can set 2 IP's in the IIS Smart Host field. _____ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Wednesday, July 21, 2004 3:47 PM To: [ExchangeList] Subject: [exchangelist] RE: RES: RE: Multiple SMTP relay servers http://www.MSExchange.org/ Hi Tiago, Good point! One location I worked with had 4 relays! One for MailEssentials, one for MailSecurity, One for iHateSpam and one for SpamAssisin. All inbound mail was run through all four relays before hitting the corporate Exchange Servers. Turned out to work pretty good and very few false positives and very little spam got it. I'll need to write up the configuration some day at www.msexchange.org <http://www.msexchange.org> . Thanks! Tom <http://www.isaserver.org/shinder> www.isaserver.org/shinder Get the book! Tom and Deb Shinder's Configuring ISA Server 2004 <http://tinyurl.com/3xqb7> http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Wednesday, July 21, 2004 1:23 PM To: [ExchangeList] Subject: [exchangelist] RES: RE: Multiple SMTP relay servers http://www.MSExchange.org/ Also, be careful that if both relays run GFI MailEssentials, your spam database on the SMTP gateways won't be the same (mail that is whitelisted on one server may be considered spam on another). Tiago de Aviz SoftSell (41) 340-2363 www.softsell.com.br <http://www.softsell.com.br/> Esta mensagem, incluindo seus anexos, tem caráter confidencial e seu conteúdo é restrito ao destinatário da mensagem. Caso você tenha recebido esta mensagem por engano, queira por favor retorná-la ao destinatário e apagá-la de seus arquivos. Qualquer uso não autorizado, replicação ou disseminação desta mensagem ou parte dela é expressamente proibido. A SoftSell não é responsável pelo conteúdo ou a veracidade desta informação. _____ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: Chris.Wall@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: glara@xxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSEXchange.org Discussion List as: Chris.Wall@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist