[isalist] Re: SMTP Outbound from different IP addresses

  • From: "Jerry Young" <jerrygyoungii@xxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Tue, 4 Mar 2008 10:07:06 -0500

T,

I read it differently.  I thought the goal was to have them send using
DIFFERENT IP addresses so that if one gets black listed, the other two would
still be "good".


On 3/4/08, Thor (Hammer of God) <thor@xxxxxxxxxxxxxxx> wrote:
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Receiving is easy... The goal was for all of them to SEND with the same
> IP, which you can't guarantee with ISA using multiple IPs on the
> external interface.
>
> t
>
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> > bounce@xxxxxxxxxxxxx] On Behalf Of Han Valk
> > Sent: Tuesday, March 04, 2008 5:39 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SMTP Outbound from different IP addresses
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Mmm I asumed that those SMTP serverd also needed to receive SMTP
> > traffic.
> >
> > ________________________________
> >
> > From: isalist-bounce@xxxxxxxxxxxxx on behalf of Jerry Young
> > Sent: Tue 3/4/2008 1:36 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SMTP Outbound from different IP addresses
> >
> >
> > I think this was for outbound traffic, not inbound.
> >
> > How would you ensure that the IP address ISA used to send mail to the
> > Internet changed?  I can't think of any way it could; unless it can do
> > a
> > one-to-one NAT.
> >
> > A non-ISA server solution is available, though.
> >
> > Three mail gateways with external interfaces on them are used in the
> > mail
> > traffic path both inbound and outbound.  ISA could then sit between
> > them.
> >
> > Would require 3 MX records, though, and some modification of the
> > Exchange
> > SMTP Connector (assuming Exchange inside) to use the mail gateways as
> > smart
> > hosts.
> >
> > Mail flow would then go Internet -> Mail Gateways -> ISA -> Exchange
> > for
> > inbound and Exchange -> ISA -> Mail Gateways -> Internet for outbound.
> >
> > Could get more clever with load balancing on either side but I figured
> > less
> > complexity with this example would help make it easier to understand.
> > :)
> >
> >
> > On Tue, Mar 4, 2008 at 5:45 AM, Han Valk <Han.Valk@xxxxxxxxxxxxxxx>
> > wrote:
> >
> >
> >       http://www.ISAserver.org <http://www.isaserver.org/>
> >       -------------------------------------------------------
> >
> >       Why not? Configure 3 different IP addresses on the external NIC.
> > Configure 3
> >       different SMTP server publishing rules each pointing to
> different
> > IP
> > address
> >       on the external NIC.
> >
> >       ________________________________
> >
> >       From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
> >       Sent: Mon 3/3/2008 6:06 PM
> >       To: isalist@xxxxxxxxxxxxx
> >       Subject: [isalist] Re: SMTP Outbound from different IP addresses
> >
> >
> >       Hi Rob,
> >
> >       That would be a nice feature. But no, you can't do that.
> >
> >       Thomas W Shinder, M.D.
> >       Site: www.isaserver.org <http://www.isaserver.org/>
> > <http://www.isaserver.org/>
> >       Blog: http://blogs.isaserver.org/shinder/
> >       Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
> >       MVP -- Microsoft Firewalls (ISA)
> >
> >
> >
> >
> >       ________________________________
> >
> >              From: isalist-bounce@xxxxxxxxxxxxx
> >       [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Rob Moore
> >              Sent: Monday, March 03, 2008 10:47 AM
> >              To: isalist@xxxxxxxxxxxxx
> >              Subject: [isalist] SMTP Outbound from different IP
> > addresses
> >
> >
> >              Hello all-
> >
> >              ISA 2006 Standard.
> >
> >              I'm guessing this is a fairly simple question. Hope so,
> > anyway.
> >
> >              We have three servers that do SMTP outbound. Is there a
> > way to
> > have
> >       each one send SMTP traffic from a different IP address on our
> one
> > ISA
> > server?
> >       I'd like to isolate them to different IP addresses so when one
> > gets
> >       blacklisted (as happened over the weekend) they don't all get
> > blacklisted.
> >
> >              Thanks,
> >              Rob
> >
> >
> >
> >              ++++++++++++++++++++++++++++++++++++
> >
> >
> >              May your life preach more loudly than your lips.
> >              --William Ellery Channing
> >
> >
> >              ++++++++++++++++++++++++++++++++++++
> >
> >
> >       ________________________________
> >
> >              Never miss a thing. Make Yahoo your homepage.
> >       <http://us.rd.yahoo.com/evt=51438/*http://www.yahoo.com/r/hs>
> >
> >       ------------------------------------------------------
> >       List Archives: //www.freelists.org/archives/isalist/
> >       ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> >       ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> >       ISA Server Blogs: http://blogs.isaserver.org/
> >       ------------------------------------------------------
> >       Visit TechGenix.com for more information about our other sites:
> >       http://www.techgenix.com <http://www.techgenix.com/>
> >       ------------------------------------------------------
> >       To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >       Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> >
> >
> >
> > --
> > Cordially yours,
> > Jerry G. Young II
> > Microsoft Certified Systems Engineer
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>


-- 
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer

Other related posts: