[isalist] Re: SMTP Outbound from different IP addresses

  • From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 4 Mar 2008 06:57:41 -0800

http://www.ISAserver.org
-------------------------------------------------------

Receiving is easy... The goal was for all of them to SEND with the same
IP, which you can't guarantee with ISA using multiple IPs on the
external interface.  

t


> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx] On Behalf Of Han Valk
> Sent: Tuesday, March 04, 2008 5:39 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Mmm I asumed that those SMTP serverd also needed to receive SMTP
> traffic.
> 
> ________________________________
> 
> From: isalist-bounce@xxxxxxxxxxxxx on behalf of Jerry Young
> Sent: Tue 3/4/2008 1:36 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SMTP Outbound from different IP addresses
> 
> 
> I think this was for outbound traffic, not inbound.
> 
> How would you ensure that the IP address ISA used to send mail to the
> Internet changed?  I can't think of any way it could; unless it can do
> a
> one-to-one NAT.
> 
> A non-ISA server solution is available, though.
> 
> Three mail gateways with external interfaces on them are used in the
> mail
> traffic path both inbound and outbound.  ISA could then sit between
> them.
> 
> Would require 3 MX records, though, and some modification of the
> Exchange
> SMTP Connector (assuming Exchange inside) to use the mail gateways as
> smart
> hosts.
> 
> Mail flow would then go Internet -> Mail Gateways -> ISA -> Exchange
> for
> inbound and Exchange -> ISA -> Mail Gateways -> Internet for outbound.
> 
> Could get more clever with load balancing on either side but I figured
> less
> complexity with this example would help make it easier to understand.
> :)
> 
> 
> On Tue, Mar 4, 2008 at 5:45 AM, Han Valk <Han.Valk@xxxxxxxxxxxxxxx>
> wrote:
> 
> 
>       http://www.ISAserver.org <http://www.isaserver.org/>
>       -------------------------------------------------------
> 
>       Why not? Configure 3 different IP addresses on the external NIC.
> Configure 3
>       different SMTP server publishing rules each pointing to
different
> IP
> address
>       on the external NIC.
> 
>       ________________________________
> 
>       From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
>       Sent: Mon 3/3/2008 6:06 PM
>       To: isalist@xxxxxxxxxxxxx
>       Subject: [isalist] Re: SMTP Outbound from different IP addresses
> 
> 
>       Hi Rob,
> 
>       That would be a nice feature. But no, you can't do that.
> 
>       Thomas W Shinder, M.D.
>       Site: www.isaserver.org <http://www.isaserver.org/>
> <http://www.isaserver.org/>
>       Blog: http://blogs.isaserver.org/shinder/
>       Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
>       MVP -- Microsoft Firewalls (ISA)
> 
> 
> 
> 
>       ________________________________
> 
>              From: isalist-bounce@xxxxxxxxxxxxx
>       [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
>              Sent: Monday, March 03, 2008 10:47 AM
>              To: isalist@xxxxxxxxxxxxx
>              Subject: [isalist] SMTP Outbound from different IP
> addresses
> 
> 
>              Hello all-
> 
>              ISA 2006 Standard.
> 
>              I'm guessing this is a fairly simple question. Hope so,
> anyway.
> 
>              We have three servers that do SMTP outbound. Is there a
> way to
> have
>       each one send SMTP traffic from a different IP address on our
one
> ISA
> server?
>       I'd like to isolate them to different IP addresses so when one
> gets
>       blacklisted (as happened over the weekend) they don't all get
> blacklisted.
> 
>              Thanks,
>              Rob
> 
> 
> 
>              ++++++++++++++++++++++++++++++++++++
> 
> 
>              May your life preach more loudly than your lips.
>              --William Ellery Channing
> 
> 
>              ++++++++++++++++++++++++++++++++++++
> 
> 
>       ________________________________
> 
>              Never miss a thing. Make Yahoo your homepage.
>       <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs>
> 
>       ------------------------------------------------------
>       List Archives: //www.freelists.org/archives/isalist/
>       ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
>       ISA Server Blogs: http://blogs.isaserver.org/
>       ------------------------------------------------------
>       Visit TechGenix.com for more information about our other sites:
>       http://www.techgenix.com <http://www.techgenix.com/>
>       ------------------------------------------------------
>       To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>       Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> 
> 
> 
> --
> Cordially yours,
> Jerry G. Young II
> Microsoft Certified Systems Engineer
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: