DNS configuration behind a router for Mail Services

I am in the beginning stages of trying to set-up a test ground for a local mail server. I am playing with OS X servers DNS functions. I am new to DNS and am having slight trouble.
What I want to do is have OS X DNS point to another server that is on my nat for mail exchange (it is a suse linux box running kerio).
My current set-up is:
internet --> Router for internal NAT --> OS X server is behind this nat on an IP of 10.100.251.10, the suse box is on 10.100.251.11
I have set-up a primary zone: ns1.domain_x.com with a server IP being that of my internet static IP (supplied by my ISP).
I have opened the necessary ports on my router (53) to point to the os x server box for DNS serving.
My problem is.. I need to setup a mail exchange (mail.domain_x.com) record that points to the 10.100.251.11 box.
When I do this and the global DNS servers update, a host lookup will point mail.domain_x.com to 10.100.251.11
Which obviously is not right.
am i missing a concept here?
the dns server and the mail exchange I want to run are being running on the same Internet IP address, just behind a nat that the os x server is not controlling.
any suggestion would be appreciated.. TIA

The MX data/pointers is only needed for server to server mail exchange so that is no problem.
(If the DNS and the mailserver are supposed to use the same public IP but run on different NATed IPs/machines you forward the traffic to the different NATed IPs based on portnumbers in your Internet router/firewall.)
The problem I think is the mailserver finding itself on the right IP for the public IP domainname.
I guess the easiest way to do it would be to have two DNS machines: one for public and one for private IPs.
The private IP DNS would serve the mailserver and the internal NATed network, if you are using the same domainname internally.
Or (as the one with the public IP data is NATed), maybe BIND views can be used to serve different zonefiles for the same domainname depending on wether the DNS lookups comes from Internet and/or the NAT router gw LAN IP or if they come from any other NATed LAN IP.
Or maybe having only a hostfile with the private address for the same domainname would suffice on the mailserver and also using the ISP's DNSes for finding other public IP mailservers on it.
That wouldn't fix finding the mailserver (using the same domainname) from other machines on the NATed LAN though.

Similar Messages

DNS for Mail service Virtual Domains

On a server primarily running as a Mail server with 10.6.3 (DNS and OD also running)
If host name is mail.domain.com and
if mail service has a virtual domain virtualdomain.com,
in the DNS setup, virtualdomain.com should have an MX record like mail.virtualdomain.com and either an A record pointing to the IP of mail.domain.com OR a CNAME pointing to mail.domain.com?
When setting to the CNAME, DNS logs says:
"25-May-2010 11:47:52.610 zone virtualdomain.com/IN/com.apple.ServerAdmin.DNS.public: virtualdomain.com/MX 'mail.virtualdomain.com' is a CNAME (illegal)"
but if I set to an A record pointing to the IP, isn't there a PTR conflict with the mail.domain.com pointing to the same IP?

SMTP requires an A or AAA as the required response for the box named in an MX.
Your MX for the domain or subdomain would/should/must aim at an A or AAA.
Not a CNAME. That's considered illegal.
Yes, random domains can all have their respective MX records pointing to the same mail server. So long as the mail server has an A or AAA record. And that mail server itself is expected to be configured to accept mail for those domains for local delivery, or as part of a relay.

Configure Huawei hg655b router for bonjour

This may be of use at least to Romanian AppleTV owners that have Romtelecom their Internet provider. After some struggle I've been able to properly configure Huawei hg655b router so that my AppleTV 3 is seen by iPad and macbook, both wired and wireless.
Here are the settings I tinkered with (after logging in into admin
- Basic -> Lan -> uncheck permanent lease
- Basic -> WLAN -> Select the SSID we use and: check WMM, uncheck AP isolation
- Advanced -> Firewall -> Select low (though I believe medium works fine, too)
- Advanced-> IGMP Snooping -> disable IGMP snooping
- (I'm not sure this is needed) Advanced -> UPnP -> enable UPnP
This way I've been able to finally see the airplay icon (and use it) in iTunes, mountain lion mirroring and iPad tray.
HTH.

It worked for me as well, thank you very much! I am using Huawei HG658 as main router and gateway? The only thing I had to do with respect to your post was uncheck IGMP snooping.
Again, thanks!

Which Cisco router for NTP service

Hello,
I'm looking for deploying NTP service for multi-customer (in Datacenter).
So, I take a look at Cisco routers list and I saw that some router doesn't have hardware-clock / internal-clock ; for example 2600 series.
I'm looking for a "cheap" but good solution to provide NTP :
- "Cheap" : that's why I take a look at routers, and not directly NTP appliance.
- "Good" : something that can provide time to 300+ end-devices.
Cisco 800 series got hardware-clock, if I read good. But this is the cheapest router, so I don't feel confident.
> What's the "best" router for NTP server ?
> Please, could you share your experiences, opinions ?
Thanks,
Have a nice day.

Cisco 800 series apparently got internal clock, could it do the job correctly?
Rick and I have answered this question already.
Depends on the router, you can instruct the router to regularly update the hardware clock using the command "ntp update-calendar".
If you really insist on a router, an 800 router, then you can get all your device to sync to your router and your router gets sync somewhere in the internet.
Make sure you have the following commands:
ntp server <NTP server>
ntp update-calendar
Note: You can have multiple NTP server IP addresses. And the command above are hyperlinks.
Warning: DO NOT be tempted to use the command "ntp master".

DNS for Mail service.

I want to use java to send mail by smtp service.
but for some hosts, the InetAddress class can't find out
the ip address for the hosts, which need the MX flag in
DNS Query data package(UDP).
I can send the query and get the result from the ISP
DSN server, but the replay UDP data is quit complex,
I have not find a simple way to get the IP address from
the UDP data.
Can any one help me? Or Are you doing the same thing
like that ? We can talk about it together.
Thanks
Scott

HI Duker,
I tred to use ur way.
in the following code,
an excpetion thrown .like
"javax.naming.NoInitialContextException: Cannot instantiate class: com.sun.jndi.dns.DnsContextFactory. Root exception is java.lang.ClassNotFoundException: com.sun.jndi.dns.DnsContextFactory"
And I try to find the related classes in the libs,
but can not find it,so I can not get any related document about the usage of the related classes.
Can you give me more help?
Regards.
Scott
<code>
package dnstest;
import java.util.*;
import javax.naming.*;
import javax.naming.directory.*;
public class dns_t {
public static void main(String[] args) throws NamingException{
Properties props = new Properties();
props.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.dns.DnsContextFactory");
props.put(Context.PROVIDER_URL, "dns://ns1.dns.com/thedomain.com");
DirContext ictx = new InitialDirContext(props);
Attributes attrs1 = ictx.getAttributes("www", new String[] {"A"});
Set st = attrs1.keySet();
Iterator it = st.iterator();
NamingEnumeration it=attrs1.getAll();
while (it.hasMoreElements()) {
System.out.println((String)it.nextElement());
Hi,
You could try the JNDI-DNS early access service
provider, it is basically a provider for the JDNI api
that allows you to query a given DNS server.
Checkout
http://developer.java.sun.com/developer/earlyAccess/jnd
/#DNS
The below code is a simple test that looks up the IN A
record for www.thedomain.com
import java.util.*;
import javax.naming.*;import javax.naming.directory.*;
>
public class DnsTest {
public static void main(String[] args) {
Properties props = new Properties();
props.put(Context.INITIAL_CONTEXT_FACTORY,
"com.sun.jndi.dns.DnsContextFactory");
props.put(Context.PROVIDER_URLURL, "dns://ns1.dns.com/thedomain.com");
DirContext ictx = new
x = new InitialDirContext(props);
Attributes attrs1 = ictx.getAttributes("www",
("www", new string[] {"A"});
Set st = attrs1.keySet();
Iterator it = st.iterator()
while (it.hasNext()) {
System.out.println((String)it.next());
Hope this helps
Duke Ronlund
CoreJ.com
I want to use java to send mail by smtp service.
but for some hosts, the InetAddress class can'tfind
out
the ip address for the hosts, which need the MXflag
in
DNS Query data package(UDP).
I can send the query and get the result from theISP
DSN server, but the replay UDP data is quitcomplex,
I have not find a simple way to get the IP address
from
the UDP data.
Can any one help me? Or Are you doing the samething
like that ? We can talk about it together.
Thanks
Scott

Cannot configure wrt54gs v6 router for use with filezilla FTP client

I am new to working with FTP and very rusty on networking in general. I just downloaded filezilla to create a FTP client on my desktop. When I run their wizard, it says the connection is tainted by my router. All the forums for filezilla say I need to configure my router to allow traffic on either port 21 (ftp) or a range of ports ( they suggest 50000 to 50100).
Please let me know what I need to do to make this work
thanks in advance
ldygunner

To answer your other questions, the tutorials have it all wrong. What they really need to explain, but fail to do so, is that the only situation where a FTP client would need to use active mode (the PORT command) is where the FTP server can't accept inbound connections on arbitrary port numbers. But that's a pathological case anyway: the FTP server can always accept connections on some well defined set of port numbers, to keep its own local firewall or NAT router happy. Consequently, there is really no need at all for a FTP client system to open up any ports to support active mode, rather than always operate in passive mode (as browsers do.)
The fact of the matter is that if passive mode works in a browser for you, it will work for Filezilla also.
And the configuration tests it runs are brain damaged. Even though the wizard recommends passive mode, it never tests for it. And it doesn't really test active mode either. What it really tests is whether anything between the client and the server is "transparently" translating IP addresses and port numbers. Such a test is broken, because the mere fact of port numbers being rewritten in TCP packets is irrelevant to whether PORT (active mode) will succeed or fail.
For completeness, in case someone decides to get pedantic, there is a case where a FTP client system would need the active mode PORT command to work, but that case is now of historical interest only. It's a scenario that FTP servers no longer support, for security reasons. (What is it? When the FTP client is operating as a controller to remotely transfer files between two servers: it tells one server to use passive mode, and sends the address/port it gets to the other server in active mode, which in theory would make the second server open a connection to the first. This, in fact, is why two modes, active and passive, were originally defined in the FTP standard!) And it still wouldn't need open ports on the client system.
Message Edited by arayq2 on 10-19-2008 09:12 PM

Configure localhost report server for mail destype. REP-52266

This is forms 11g , developing with localhost in windows 7
I'm trying to configure mail destype .
I edited this file:
C:\Oracle\Middleware\user_projects\domains\ClassicDomain\config\fmwconfig\servers\AdminServer\applications\reports_11.1.2\configuration\rwserver.conf
to add this destination:
<destination class="oracle.reports.server.DesMail" destype="mail"/>
and set the smtp server
<pluginParam name="mailServer" value="xxx.xx.xxx.x">
(begin xxx... the ip of the smtp server)
Now I get an error when launching the reports server in the navigator with http://localhost:7001/reports/rwservlet/showjobs
REP-52266: Fallo al iniciar el servidor de Reports en proceso ....oracle.reports.RWException: IDL:oracle/reports/RWException:1.0

We got it working in the linux development server, so I will forget about localhost.
Now I have to take a look at how to establish the From, subject and body of the email, as I'm only able to define the destination email (with desname).

Adjusting AP Payment terms to allow for mail service

I am interested in adjusting the Accounts Payable process to release payments earlier than the payment terms (e.g. Net 30 payment would release for payment on 28th day) to allow for postal delays. Is that possible on across the board for all payees?

Hi Chris
In the automatic payment run(F110), in the parameters tab -> input a date which is two days ahead in the filed 'Customer items due by' and input todays date in the field 'Docs entered up to'
Ex: If the item is due on Sep 14 then input details as below
Docs enetered up to: 09/12/2014
Customer items due by: 09/14/2014
System will pick up all items due as of Doc entered up to date + till the date in Customer items due by.
Run the payment run the above inputs and check if the next few days due items are pulled into or not.
Thanks,
Sekhar

Set up a proper live and local DNS behind a router

Hello dear friends,
I'm new to Snow Leopard Server and also i'm quite inexperienced in setting up DNS. We bought a Mac Pro for out small company along with Snow Leopard Server to become independent from our ISP, for some specific services like web hosting, mail and to bring up new services like Address book server, iCal server, FTP, Mobile access etc...
So for me to do that i have to set up our own DNS first. We already bought our domain name (crisconsult.ro) and since then the site has been hosted on our ISP and then aliased to Apple. We also have our own (fix) public IP 80.86.123.116.
Having installed SL Server and set-up, behind an Airport extreme router, the server was unable to pick up our name server which is ns.crisconsult.ro. Since the router is the first in the network, the server became second with a local IP 10.0.1.2. This is the same IP that the server automatically set up for DNS, BUT if i keep this ip on our name server (ns) i feel it's not good since:
host ns.crisconsult.ro returns
ns.crisconsult.ro has address 10.0.1.2
and host 80.86.123.116 returns
116.123.86.80.in-addr.arpa domain name pointer ns.crisconsult.ro.
As i understand there should be our public IP (80.86.123.116), BUT all the tutorials on the net regarding setting up DNS in Leopard Server point that at DNS one should put the machine's own local IP and have the machine look at itself as DNS in network settings.
So? Is there a local DNS and a public DNS to set up? What gives?
I could really appreciate some help in configuring DNS, along to some good and real examples of DNS servers configured behind a router.
Thanks,
Andrei

Andrei,
I too, would love nothing more than to be able to use DNS on my 10.4, 10.5 & 10.6 servers. Unfortunately, the only way I have found to effectively wield a somewhat complete level of control over the bind DNS included with the server, is to abandon all usage of the Server Admin DNS control in favor of something like webmin. The good news is, webmin gives you a host of other features that I (sadly) don't expect to see within the Apple Server GUI any time soon.
Bad news, is that the 'best practice' way of setting up a stable, functional DNS on a Mac Server seems to be: clean install, webmin install, and never, ever use the apple DNS interface. Similar rule applies to web server.
I like to think the measure of a good admin is the ability to fix the problem(s) without having to reinstall completely. However, I can say from much experience and extensive googling, that what you are trying to do is a game of hopscotch in a minefield. You should be VERY familiar with the installation and setup process once you have your box configured the way you want it.
Hopefully one day Apple will decide to take the bull by the horns and address teh fact that DNS is an integral part of a sever set up these days and provide us users with some of that Apple think-outside-the-box-so-you-dont-have-to product that they have been so well known for. I can't say whether they're in too much of a hurry deploying video iPods or super-duper mice that the server product that you and I would love to see work efectively simply doesn't.
Sorry to get on a rant, I just want to save you some time that I lost figgerin' on this vexing enigma. I can use citations for my assertions if need be.
-Chance

Simple question; Mac Server Setup for Mail, iCal and Address Book Services.

Hi Guys;
I'm new to the Mac Server world and need a few questions answered.
I have purchased a new Mac mini Server for hosting File, Web, Mail, iCal and Address Book Services.
I’m comfortable setting up File and Web Services however I’m a bit uneasy setting up Mail, iCal and Address Book services to be access locally and remotely(via the internet).
My current setup is;
Internet connection (Dynamic IP) -> Router -> Mac mini Server.
I have purchased a domain name (Thornton-net.com) from DynDns.com + a custom DNS service as I can setup my router to update my domain’s IP address automatically.
I can access File and Web Services remotely (thortnon-net.com) perfectly without any issues via the Port Forwarding feature of the Router.
If I setup Mail, iCal and Address Book Services -> will Mail, iCal and Address Book clients be able to access these services hosted by the server via Thornton-net.com?
Message was edited by: Allan.Thornton

Welcome to the forums.
For mail services (and specifically for your outbound mail to be accepted by other mail servers) your mail server needs to have a static IP address and matching forward and reverse and MX records, or a tunnel to a static IP (with matching DNS), or you need another mail server where you have an authorized relay. Without that, your mail will be considered a spam engine, and dropped.
Additionally, your particular tier of service with your ISP (with a static IP) will generally allow server-oriented access and server-oriented network traffic, where a residential or other tier of service (with a dynamic IP addresses) can be firewalled.
The ISP controls the "high ground" of the network connections here, so you pretty much get to play by their rules and requirements. If they don't offer static IP, then (presuming their T&Cs permit it) you get to tunnel (via IPv6, for instance) to a tunnel broker, and receive your network traffic via that (and with matching DNS) point of presence. That could well be a tunnel for your mail at whichever your DNS provider is here, because you'll have issues with your dynamic address. (You get to sort out if they offer that.)
Far and away the easiest approach (if you want to host this stuff yourself) is to work with the ISP. They're inherently involved in your network, and they and they alone have full control over your reverse DNS configuration.

SMTP - mail service

Hi,
i configured the SMTP for mail service.
I can able to send mail to our domain ( for ex: abc.com ) - default domain
i gave SMTP Connection as : mail.abc.com
the above scenario --- will work for me if i send mail to our default domain. but i am not able to send to yahoo, gmail.
Please help me ...
--- Lee

Hi Lee,
In the SCOT, SMTP node you need to have the SMTP server address. if you've given the sap server IP address, then revert it back.
What Juan has already mentioned,
"you need to make sure that the IP address of the SAP System is populated on the SMTP relay agent for the mails to leave the domain." that means you've to tell your SMTP mail admin guys to add the SAP server IP address in the relay agent.
Regards,
Debasis.

Configure Read-Only Routing Azure DBs

Is it possible to configure Read-Only Routing for the SQL Azure Databases in Active-Geo Replication in similar way what can be achieved in Always-On Availability Groups

Hi,
The Active Geo-Replication feature provides:
Readable online secondary databases: An application can access an online secondary database for read-only operations using the same security principals used for accessing the primary database. Continuous copy operations on the online secondary database take
precedence over application access. Also, if the queries on the online secondary database cause prolonged table locking, transactions could eventually fail on the primary database.
Please note : Active Geo-Replication is only supported for databases in the Premium service tier.
Reference :
https://msdn.microsoft.com/en-us/library/azure/dn741339.aspx#Concepts
Regards,
Mekh.

7600 as Backbone router for MPLS core

I have 7600's and 7500's in my backbone and 7200's on the edge. My question is that when I look at the feature navigator the 7600 with Sup 720 is missing a lot of basic features required to be a core router of an MPLS Backbone. Features like Traffic engineering fast reroute, MPLS enabled Netflow are missing on this platform, is this platform not a good candidate to be a Backbone router for a service provider offering MPLS services??? 7500 on the other hand it seems 7500 seems to have support for the MPLS related features.

Not sure what version you where looking at but...
Cisco Internetwork Operating System Software
IOS (tm) s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(18)SXF, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by cisco Systems, Inc.
Compiled Sat 10-Sep-05 01:18 by ccai
Image text-base: 0x40101040, data-base: 0x42D60000
ROM: System Bootstrap, Version 12.2(17r)S2, RELEASE SOFTWARE (fc1)
BOOTLDR: s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(18)SXF, RELEASE SOFTWARE (fc1)
CASAN_Core1 uptime is 1 week, 4 hours, 9 minutes
Time since CASAN_Core1 switched to active is 1 week, 4 hours, 8 minutes
System returned to ROM by power cycle (SP by power on)
System image file is "disk0:s72033-advipservicesk9_wan-mz.122-18.SXF.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco CISCO7609 (R7000) processor (revision 1.1) with 983008K/65536K bytes of memory.
Processor board ID FOX092307Q5
SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache
Last reset from power-on
SuperLAT software (copyright 1990 by Meridian Technology Corp).
X.25 software, Version 3.0.0.
Bridging software.
TN3270 Emulation software.
1 SIP-200 controller .
1 Virtual Ethernet/IEEE 802.3 interface
74 Gigabit Ethernet/IEEE 802.3 interfaces
1917K bytes of non-volatile configuration memory.
8192K bytes of packet buffer memory.
65536K bytes of Flash internal SIMM (Sector size 512K).
Configuration register is 0x2102
CASAN_Core1#
CASAN_Core1(config)#mpls traffic-eng ?
auto-bw auto-bw parameters
fast-reroute fast-reroute parameters
link-management Link Management configuration
logging Trap logging configuration
path-selection Path Selection Configuration
reoptimize Reoptimization parameters
signalling Traffic Engineering Signalling Parameters
topology Topology Database Configuration
tunnels Traffic Engineering tunnels

Activate workflow for mail to MRP controller

Hello Experts
I am configuring to activate workflow for mail to MRP controller, I am not able to activate event linking. Does any one know how to activate linking? Any help is appreciated.
Thanks
Ankit

Hello,
SAP Business Workflow enables the design and execution of business processes within SAP application systems.
Please find the below links for activating workflow:
http://wiki.sdn.sap.com/wiki/display/ABAP/SAPBusinessWorkflow
http://www.scribd.com/doc/10922731/Simple-SAP-Workflow
Regards,
Alok Tiwari

Workflow for Mail to MRP Controller

Hello Experts
I am configuring to activate workflow for mail to MRP controller, I am not able to activate event linking. Does any one know how to activate linking? Any help is appreciated.
Here is configuration path
SPRO - Materials Management - Consumption Based Planning - Evalution - Activate workflow for mail to MRP controller
Thanks
Ankit

Hi,
If you follow the steps and click on 'Assign Agents' it list the workflow template that is triggered e.g. WS03100020. If you open the builder (transaction SWDD) and view workflow WS03100020 you can see that there is no triggering event specified so you cannot activate the event linkage.
Also the object used in this workflow is BUS1001and not BUS3020. If you want to trigger this workflow then you should check what event should triggered it and add it to the workflow via SWDD => Basic Data => Triggering events.
What transaction should trigger this workflow? Switch on your event trace and recreate thje scenario. See what events are raised and see if one can be used to trigger the workflow. If no events exist then try to find user Exit or BAdi and trigger your event using function module SAP_WAPI_CREATE_EVENT or use SAP_WAPI_START_WORKFLOW to trigger event directly without events.
Regard,
Eddie

DNS configuration behind a router for Mail Services

Similar Messages

Maybe you are looking for