From owner-freebsd-questions Sat Jun 13 03:27:28 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id DAA27090 for freebsd-questions-outgoing; Sat, 13 Jun 1998 03:27:28 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from cyclone.degnet.baynet.de (www.degnet.baynet.de [194.95.214.129]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id DAA27022 for ; Sat, 13 Jun 1998 03:26:51 -0700 (PDT) (envelope-from malte@webmore.com) From: malte@webmore.com Received: from neuron.webmore.com (unverified [194.95.214.188]) by cyclone.degnet.baynet.de (EMWAC SMTPRS 0.83) with SMTP id ; Sat, 13 Jun 1998 12:28:50 +0200 Received: (from malte@webmore.com) by neuron.webmore.com (8.8.8/8.8.8) id MAA03767; Sat, 13 Jun 1998 12:25:04 +0200 (CEST) Message-ID: X-Mailer: XFMail 1.2 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: Date: Sat, 13 Jun 1998 12:25:04 +0200 (CEST) Reply-To: malte@webmore.com To: Stephen Mathezer Subject: RE: sendmail/dns/relaying question Cc: questions@FreeBSD.ORG Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Everything looks fine with your config, BUT the big question is: What does a RAR on 123.123.123.123 give ? It seems here is your problem. Malte. On 12-Jun-98 Stephen Mathezer wrote: > > This isn't really FreeBSD specific but I'm hoping someone out there can > help me with this. > > Suppose I have two domain names which cover the same set of IP addresses. > > eg: fw.domain1.com = 123.123.123.123 > fw.domain2.com = 123.123.123.123 > > Now, I have a firewall which is relaying mail from the Internet to an > internal mail server. > > I am trying to use the relay_based_on_MX feature in Sendmail 8.9.0 > Neither domain1.com nor domain2.com is in sendmail.cw since I want to > relay mail for these domains to an internal mail server. > > The internal DNS used by the firewall lists fw as the mail exchanger for > the domain so things sort of work. > > Here is my problem > > I want to use the short form of the DNS tables. > > eg: > db.both-domain looks like: > > @ IN SOA fw.domain1.com. me.domain1.com. ( > .........) > > @ IN A 123.123.123.124 > MX 10 real-mail-server > MX 20 fw > > named.boot then looks like > > primary domain1.com db.both_domains > primary domain2.com db.both_domains > > > All machines have the same addresses in both domains the two domain stuff > is simply so that our marketing folks can be happy with our fancy domain > name and the rest of us can use the one we have always used. > I really would rather not maintain two db files separately for the domains > which is why I am using the short form and only using one file. > > The problem arrives when I try to send mail to user@domain2.com from the > Internet. The relay_based_on_MX doesn't allow the relay because the > firewall (which to the outside world is our primary MX) decides that it is > not an MX for domain2.com since it knows that it's name is fw.domain1.com. > > So, is there a way that I can make my firewall realize that it is in both > domains or is there a simpler way of going about this. The goal I am > trying to acheive here is: > > 1- fw is the primary MX for domain1.com and domain2.com as far as the > outside world is concerned. > 2- fw does NOT deliver mail locally for either but rather forwards it to > real_mail_server.domain1.com (acheived by using a different name server > internally which lists a different set of MXs which do include fw) > 3- I only need to maintain _1_ db file for both domains under DNS > 4- I am a good neighbour and limit the spam I allow to pass through my > system. > > Thanks for reading my long winded query I would appreciate any advice. > > -Steve > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message ---------------------------------- E-Mail: malte@webmore.com Date: 13-Jun-98 Time: 12:24:56 ---------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message