|
|
|
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
|
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now! |
|
#1
|
|||
|
|||
|
Hi all,
I have a system on which i installed qmail,qmailpop3d,sqwebmail for to access mail from web and apache 1.3.28 , i want to hook this system to the internet. this system is in DMZ using private c class IP 192.168.10.10 i have a chekpoint firewall which nats all request to this server. can anyone suggest me how to install a DNS server on this box and what types of records should i have to access these servcies like POP3,SMTP and HTTP using diffrent names like pop3.myserver.com mail.myserver.com www.myserver.com all this services are on same system Thanks in Advance Prashant |
|
#2
|
|||
|
|||
|
One question is who is the intended audience of these services?
External, internal or both? |
|
#3
|
|||
|
|||
|
This server will be used as mailserver by both internal and external users to send and recive mails globally,
|
|
#4
|
|||
|
|||
|
I am sure this is not optimised but I reckon you have no choice but to advertise the dmz external interface or a public address in your DMZ to the world if you expect to receive mail from the internet.
You could also cname www, mail, pop3 to a single host in your DMZ. Ensure the public address is present or people outside your network will fail at the 192.168.x.x. It does make internal clients having to resolve the mail/www server go to your dmz to get reverse-nated or PAT, port fwding (not sure of the checkpoint term ) This will also cause issues for other DNS servers around the world who then try to cache the ns and a record of your 192.168.x.x box. Doesnt checkpoint have a DNS server/Proxy built-in? Like other firewalls?Hope that helps. Maybe somebody else has come accross a config similiar. Cheers: Last edited by dag-otto : October 15th, 2003 at 04:40 PM. |
|
#5
|
||||
|
||||
|
CNAME is evil. And CNAME'ing a mail host is even more extremely discouraged.
Please read my post here for details: "Things to remember when defining your zones" http://forums.devshed.com/t74600/s.html
__________________
Send me a private message if you would like me to setup your DNS for you for a price of your choosing. This is the preferred method if your DNS needs to be fixed/setup fast and you don't have the time to bounce messages back and forth on a forum. Also, check out these links: Whois Direct | DNS Crawler | NS Trace | Compare Free DNS Hosts |
![]() |
| Viewing: Dev Shed Forums > System Administration > DNS > Installing external DNS server |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|