Re: Publishing SMTP servers on the internal network.

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 31 Dec 2003 05:30:12 -0600

Hi John,
 
You mean packet filter "rules"? :-)
 
Thanks!
Tom

  _____  

From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, December 30, 2003 2:19 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publishing SMTP servers on the internal network.


http://www.ISAserver.org


Now I understand.

 

Yes, in that case, you would put them in the DMZ with the DMZ configured
with public IP addresses. Then you use rules instead of publishing. By
using rules, they use their IP address.

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: Risun Antony [mailto:risuna@xxxxxxxxxxxxx] 
Sent: Tuesday, December 30, 2003 12:06 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publishing SMTP servers on the internal network.

 

http://www.ISAserver.org

Hi All

 

Thanks for the resonse and do appreciate your concern John.

We are a hosting company and have 10 or so Mail Servers that are already
on the internet.

What i am trying to do is to give it some protection if possible, by
bringing it behind a firewall, and publishing the same.

And yes i am aware of the fact that i cannot have multiple SMTP servers
using a single IP. 

All my SMTP servers and Web servers have their own Public IP addresses.

Even though i have separate IP addresses for my Mail Servers, I wont be
able to publish my SMTP servers 

because ISA uses its default IP address for outbound messages and
doesnot use the IP address that i bind it to.

 

Yes, Jim i get the idea that this is by design. I was wondering how
would publishing 

my SMTP servers work if i would keep them in the DMZ zone?!?! I guess it
would again use 

the default IP address on that interface, right? As you said "By
default, all traffic leaving a 

Windows server leaves on the default IP"  thats what i can expect. Thanx
for the reply again.

 

 

Risun Antony

Tec

Other related posts: