Mail Service With Internal vs External Domain Question
I have a SLS setup with a private domain ex: server.acmewidgets.private
The local dns resolves correctly
I have a static IP for this server and I would like it to handle the email for my domain which is ex: acmewidgets.com
(Currently acmewidgets.com has been having it's website and email handled by an external source)
Do I need to reinstall the SLS with the domain server.acmewidgets.com to get the email working correctly? Or do I simply just point the MX Records to the static IP of server.acmewidgets.private?
If I do not need to reinstall, what needs to be done to create the flow of email in and out of the SLS?
No need to re-install Snow Leopard Server, you will need however to configure a few things.
First up you will need to configure the Mail service to accept mail for this external domain as at the moment it will be configured to only accept mail for your local domain.
In *Server Admin*, go to the Mail section and click on Advanced, now click on Hosting. In the hosting section you can add as many domains as you like for the mail server to accept mail for, the simplest way is to add the domains as virtual hosts.
Point your external MX records to the address for the server so that mail will be directed to your server. If your server is on a fixed external IP address then all done.
If your server is behind a firewall and on a private IP address you will need to forward port 25 on your firewall to the Snow Leopard Server. If you are also running DNS you should create a new Zone for your external domain with MX records that point to your Snow Leopard Server as clients will need to know that your server is the final delivery destination for that domain. If your server really is on a live fixed external IP address this step is not necessary.
Similar Messages
-
Lync Implementation with different internal and external domain sync
Hello Experts,
Having Windows 2012r2 with Lync 2013 frontend and Edge 2012 server on Win2012. Internal domain name is test.local and Internet domain name is : tgroup.com. Internally all the clients are able to sync with frontend
server using [email protected] or [email protected] Internal CA and External Digicert works fine. But only problem is with external clients who want to communicate through edge server.
Edge server has 3 LAN ip address (nat with public IP), 10.10.10.2, 10.10.10.3, 10.10.10.4 and another Internal network interface which has ip 10.10.20.3
which uses that to communicate with front-end.
How to achieve this ? We dont have reverse proxy configured and we have only two servers.
Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.The reverse proxy is used to publish URL's like the meet and dialin url, the address book url and the lync mobile client (smart phones and tablets) urls. This doesn't impact the external desktop user access as thats via the edge server. There is more to
it than that but for the sake of keeping this simple lets stick to that for now.
As far as SIP domains go. Think of your Lync users as having a SIP address similar to email addresses. You wouldn't have a user with an internal email address but with a different external email address. In fact best practice is to have the Lync SIP address
match the email address.
My reccomendation is to use the ttgoup.com as a sip domain and not the test.local
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Lync Sorted blog -
Hello,
I'm seeing an issue that started this past Monday with no recent change to our environment.
External Outlook Anywhere users and Mobile users, OWA users are unaffected.
Internal Users are affected when using Outlook of any version, 2010 or 2013.
-Internal Users normally log into their workstation with their ad credentials, domain joined machines. Outlook opens without credentials prompting ideally.
1 . Using Cached Mode:
a. Login Prompts, slowness - Since Monday, users are getting prompted to login. The prompt goes away after logging in at startup. It is also causing high CPU
on the workstations.
b. Free/Busy, Out of Office doesn't work. I can, however complete auto-setup for a new user, so autodiscover is not completely down for internal users.
c. Checking Connection Status shows connecting status on highlighted entry below without ever establishing connection (just goes away).
The outlook icon in the system tray says "Outlook is requesting data from the server":
2. Using Non-cached mode
a. No Login Prompt at startup, business as usual
b. Free/Busy, Out of Office works fine. Autodiscover is fine.
c. Checking Connection Status shows normal except, it has "casarray URL, then status is referral" it seams to flicker this constantly then go away intermittently.
d. Main issue in non-cached mode is, sometimes a user will log into windows, open outlook and it will not open and says "server is unavailable. Retry, work offline, or cancel" I can try re-opening, same message.
Only after logging out of windows, logging back in, I can get back into outlook. This is not every time, or consistent with specific users, but random.
3. Lync Pop up for credentials often, though entering the password.
URLs are correct. Autodiscover, EWS, etc.
Already tried bypassing our loadmaster load balancer with host files on clients. same issue regardless of casarray node.
Not sure what is going on.
JoshYou have a hybrid configuration with Office 365, right? You didn't provide this valuable piece of information.
In Exchange Online PowerShell run this command:
Get-OrganizationConfig | FL PublicFoldersEnabled
If the value is "Remote" then users with Exchange Online mailboxes are looking to on-premises public folders. Be sure that you have legacy pubic folder interoperability properly configured.
http://technet.microsoft.com/en-us/library/dn249373(v=exchg.150).aspx
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." -
Exchange 2013 DNS for internal and external domain
Hi All,
I have been assigned a task to implement Microsoft Exchange Server 2013. I need some help in setting up DNS namespaces and design a strategy to have same internal and external names. Let me share some details here.
We have an Active Directory domain myinternaldomain.net, and we have a public domain
mypublicdomain.com and we have setup email policy to have
mypublicdomain.com as the SMTP domain for all the users. We have created another DNS zone in Active directory integrated DNS and created a records for
mail.mypublicdomain.com and autodiscover.mypublicdomain.com which will point to CAS NLB IP. We have 2 CAS servers and 2 MBX servers, we have configured DAG for MBX High availability and planning to implement WNLB for CAS as
hardware LB is out of scope due to budget constrains.
We want to have same URLs for OWA, Autodiscover, ECP and other services from internal network as well as from public network. Users should not be bothered to remember two URLs, using one from internal and other from public networks. I also want to confirm
that with this setup in place do i need to have myinternaldomain.net and server names in SAN certificate?
ThanksHi Sccmnb,
You can easily achieve this using split DNS.
Internal DNS hostname "mail.mypublicdomain.com" will be pointing to your internal CAS NLB IP and the external public DNS hostname"mail.mypublicdomain.com" will be pointing to the Network device or
Reverse proxy server IP.
Depending upon users access location(internal\external) the IPs would vary and they should be able to access the website with same name.
The names that you would require on the certificate(Use EAC or powershell to raise the request) for client connectivity would be
SN= mail.mypublicdomain.com
SAN= autodiscover.mypublicdomain.com
You don't need to have the active directory domain name present in the certificate.
Additional to this you need to update the AutodiscoverURI for all servers and OWA,ECP,Autodiscover Virtual Directories InternalURL and ExternalURL fields with appropiate public names.
Some additional Info:
*Internal vs. External Namespaces
Since the release of Exchange 2007, the recommendation is to deploy a split-brain DNS infrastructure for the Internet-based client namespaces. A split-brain DNS infrastructure enables different IP addresses to be returned for a given namespace
based on where the client resides – if the client is within the internal network, the IP address of the internal load balancer is returned; if the client is external, the IP address of the external gateway/firewall is returned.
This approach simplifies the end-user experience – users only have to know a single namespace (e.g., mail.contoso.com) to access their data, regardless of where they are connecting. A split-brain DNS infrastructure, also simplifies the configuration of Client
Access server virtual directories, as the InternalURL and ExternalURL values within the environment can be the same value.
*Managing Certificates in Exchange Server 2013 (Part 2)
*Nice step by step article
Designing a simple namespace for Exchange 2013
Regards,
Satyajit
Please“Vote As Helpful”
if you find my contribution useful or “MarkAs Answer” if it does answer your question. That will encourage me - and others - to take time out to help you. -
Same usernames, internal vs. external domains, conflict when usingWebAccess
Currently running GW 8.0.2hp2 on NetWare 6.5sp8.
We have a single domain and single post office, and a single WebAccess
and single GWIA gateway. We about 25 external domains setup to allow
using external users' e-mail addresses our in internal corporate address
books and distribution lists following the procedure outlined here:
http://www.novell.com/documentation/...a/a2zvyc4.html
The problem is that one of my internal users in our corporate domain/PO
has the same userid as a user in one of the external domain/PO's. So,
for example, their e-mail addresses are:
[email protected]
[email protected]
Everything works except that my internal user cannot use GW WebAccess.
Trying to login to WebAccess results in the following error:
"Please login again. You may have typed your name or password
incorrectly. Remember that your user name must be unique."
If I either change my internal user's GroupWise userid, or if I delete
or rename the external user's userid, then my internal user can login
into WebAccess without a problem. So this does appear to be due to
non-unique username's. The WebAccess is seeing the internal and
external user names, and not allowing my internal user to login.
Is there a work around for this since the users are in separate domains
and PO's, or do I need to just rename my internal user's account? I
have no control over the external user's e-mail address, so I can't
rename their userid.
Is there a way to keep the "default WebAcess" gateway from looking at
external domain's for user account authentication? I have tried setting
up a class of service in the WebAccess gateway to deny access to the
external domain, and that hasn't worked either.
Thanks,
-Greg
former e-mail for posting:
[email protected]I knew I should have looked a little longer.
http://www.novell.com/support/kb/doc.php?id=7006447
Thanks,
-Greg
On 1/7/2013 12:38 PM, Greg N. wrote:
> Currently running GW 8.0.2hp2 on NetWare 6.5sp8.
>
> We have a single domain and single post office, and a single WebAccess
> and single GWIA gateway. We about 25 external domains setup to allow
> using external users' e-mail addresses our in internal corporate address
> books and distribution lists following the procedure outlined here:
>
> http://www.novell.com/documentation/...a/a2zvyc4.html
>
>
> The problem is that one of my internal users in our corporate domain/PO
> has the same userid as a user in one of the external domain/PO's. So,
> for example, their e-mail addresses are:
>
> [email protected]
> [email protected]
>
> Everything works except that my internal user cannot use GW WebAccess.
> Trying to login to WebAccess results in the following error:
>
> "Please login again. You may have typed your name or password
> incorrectly. Remember that your user name must be unique."
>
> If I either change my internal user's GroupWise userid, or if I delete
> or rename the external user's userid, then my internal user can login
> into WebAccess without a problem. So this does appear to be due to
> non-unique username's. The WebAccess is seeing the internal and
> external user names, and not allowing my internal user to login.
>
> Is there a work around for this since the users are in separate domains
> and PO's, or do I need to just rename my internal user's account? I
> have no control over the external user's e-mail address, so I can't
> rename their userid.
>
> Is there a way to keep the "default WebAcess" gateway from looking at
> external domain's for user account authentication? I have tried setting
> up a class of service in the WebAccess gateway to deny access to the
> external domain, and that hasn't worked either.
>
> Thanks,
> -Greg
>
former e-mail for posting:
[email protected] -
CRM2015 IFD Internal and External Domains
I am trying to setup CRM2015 with IFD. My internal domain is xr.local and external domain name is somethingelse.com. When going through the directions and searching through the forums I see similar questions regarding with no real information on the possibility.
Am I able to set this up to support 2 different domains and where might I find some guidance to do so?
Thanks...
GYHi David,
Yes. the above setup should "do the trick" as the servers you put with blank DNS entry should be excluded in the NRPT table.
You can confirm this by running at the client: netsh name show polocy
at command line and see something like:
Settings for da.domain.com
Certification authority :
DNSSEC (Validation) : disabled
DNSSEC (IPsec) : disabled
DirectAccess (DNS Servers) :
DirectAccess (IPsec) : disabled
DirectAccess (Proxy Settings) : Use default browser settings
Settings for .domain.com
Certification authority :
DNSSEC (Validation) : disabled
DNSSEC (IPsec) : disabled
DirectAccess (DNS Servers) : 1234:1234:1234:3333::1
DirectAccess (IPsec) : disabled
DirectAccess (Proxy Settings) : Bypass proxy
So in this scenario the .domain.com is using the DA while the specific entry (da.domain.com) is set as exclude and have emptry DNS ...
Hope this helps,
Ophir. -
How to Setup RDS custom property when internal and external domain name space is different
Hi All
I am setting up RDS for customer
My internal domain name is domain.local and my external domain is domain.com
I came across below PowerShell cmdlets on some blogs because my internal and external name space are different
Set-RDSessionCollectionConfiguration –CollectionName QuickSessionCollection -CustomRdpProperty “use redirection server name:i:1 `n alternate full address:s:remote.domain.com”
In above command, remote.domain.com points to which host?
Is it pointing to RD Session Broker
OR
Pointing to RD Session Host servers
I am not sure what above command will do exactly ?
Any help will be highly appreciated
Thanks Best Regards MaheshHi,
It all depends who is accessing the RDS Solution.
If you have a large BYOD or large number of external users, it would be better to use a public certificate.
Have a look at the following script which will simplyfy the configuration of the RDSH hosts with certificates.
http://ryanmangansitblog.com/2014/05/20/rds-2012-rdsh-certificate-deployment-script/
You can use a custom RDP property to hide the Session host names.
Have a look at the following article on configuring certificates:
http://ryanmangansitblog.com/2013/03/10/configuring-rds-2012-certificates-and-sso/
Ryan Mangan | Ryanmangansitblog.wordpress.com | Help keep the forums tidy, if this has helped please mark it as an answer -
My Yahoo mail service stopped working on my Iphone. Works fine from my PC. Help Did restart but no help.
Hello Bad Don,
Thank you for using Apple Support Communities!
I would recommend performing the troubleshooting steps in this article named iOS: Unable to send or receive email found here http://support.apple.com/kb/ts3899
Try an alternative Internet connection.
If your email is provided by your Internet provider, try connecting from the home network.
If your iOS device has an active cellular data plan, try to disable Wi-Fi: Tap Settings > Wi-Fi and turn off Wi-Fi.
If not, try a different Wi-Fi network.
Log in to your email provider's website to ensure that the account is active and the password is correct.
Delete the account from Settings > Mail, Contacts, Calendars and then add the email account again on the iOS device.
If you're still unable to send or receive email, contact your email provider and verify the account settings are correct. You will need to gather this information (PDF).
If none of that resolves the issue, I would backup and restore the device with iTunes.
iOS: How to back up and restore your content
http://support.apple.com/kb/HT1766
All the best,
Sterling -
Mobo won't work with internal or external isdn
2 of my buddy's bought themself 875P FISR mobo's, after i highly recomended it to them.
the mobo's run great except for this one major bug on it
you cant connect a isdn modem to it.
we've tested 2 isdn modems(pci internal & usb external) on both mobo's and they both do the same thing --> crash on isdn installation gives out some weird message irq not less or equal??????
both of these mobo's have the latest bios's installed on them(3.2) and we've tried clearing the NV ram/rom or something like that and that didn't seem to work + reinstalling winXP pro
Is this a known issue or is this a new prob.
their system specs:
both antec true 550 watt psu's
both 3Ghz CPU's with HT
both 1Gig Transcend Ram
both MSI 875P FISR Mobo
pc 1.
runs sata raid0 with 2 X 120gig drives(very fast)
transcend radeon 9600 XT
standard cooling.
onBoard sound
pc 2.
single 120 sata hdd(not so fast)
heculeze 9800 SE
Peltier cooling system
some 7.1 hometheater thing
Pleaze help.Quote
irq not less or equal
There is a lot of documentation for that same error all over the web I was having the same trouble a while back with no relation to isdn at all. I was never able to pin it down. It was fixed with a reinstall.
You might want to do a 'google' on that error message and do a search on it at MS site too. Maybe with isdn in the search string too.
Make sure you have all your drivers for the motherboard updated, chipset etc...
As well as the driver for the modem itself. ISDN being a technology that is somewhat on the way out the door is receiving less and less support from the Manufacturers. Are your Modem drivers for XP specifically ? There is a good chance that a Win9.x driver would not work properly.
I had ISDN for a couple years. It was better than regular dialup but overall it was a major pain in the arse. Partially becuase the modem I had was a junkie one. It plugged up to serial. Thereby limiting my max speed to 115 instead of the possible 128. It was very sensitive to port settings and the like. Was too dadgummed expensive too.
Good Luck, Hope I helped a lil.
Jagou -
Same internal and external domain names - AGAIN!
Hi all-
Like many of you, I am confronting the problem of having the same FQDN for both my Active Directory domain and Internet domain. For the sake of discussion, let's call the domain rlh.com.
I need to access an externally-hosted website on the rlh.com domain. The site is coded exclusively to use rlh.com and NOT
www.rlh.com. Therefore, the old trick of adding a static www A record on my internal DNS server will not work.
It looks like another option is to install IIS on my DC and then configure some type of forwarding to the external site. While this might work, frankly, I don't want IIS on my DC. It's a DC, not a web server.
Yet a third option, correct me if I'm wrong, looks to be using some type of "split DNS." Though I have not read the particulars (yet) of this solution, I am suspicious of it causing DNS inefficiencies.
All of these solutions look to me to be workarounds. I am preparing to install a new DC (upgrading from 2003 to 2008 R2) and want to FIX the problem, not work around it. That said, it looks like I have two options:
1. Rename my existing 2003 AD domain using rendom
2. Install the new 2008 R2 DC with the new domain name, setup domain trust between the old and new domains, and then use ADMT.
Can someone please comment on my logic here? Does anyone have experience with both of the two options? Is one less painful than the other?
As I preparatory step, I have migrated from my onsite Exchange 2003 server to Office 365. Exchange is no longer present in my organization, though some slight "remnants" may remain in Active Directory. Other than Exchange, I have a
Hyper-V host, 2 SQL Servers, and 3 RDS servers present in my environment.
Thanks.I realized this was answered, but I would like to add the following comprehensive blog on this subject.
Can't Access Website with Same Name (Split Zone or no Split Brain)
Published by Ace Fekay, MCT, MVP DS on Sep 4, 2009 at 12:11 AM 1278 0
Note - In an AD same name as the external name (split zone) scenario, if you don't want to use WWW in front of URL, such as to access it by
http://domain.com, then scroll down to "So you don't want to use WWW in front of the domain name"
http://blogs.msmvps.com/acefekay/2009/09/03/split-zone-or-no-split-zone-can-t-access-internal-website-with-external-name/
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights. -
Internal and external domain problem
Host: oserver. sbsrv. local (internal address)
Version: 10.1.2.0.2
Installation Type: Portal and Wireless
I have installed the oracle portal and works well in the internal network.
The problem:
When I try to access from public domain (www.mycompany.com) i get the welcome page from application server (fine) ,but if I press the link (log on to Oracle Application Server Portal) it redirects me to the internal address (http://oserver.sbsrv.local/portal/page?_pageid=0,1&_dad=portal&_schema=PORTAL)
I edit httpd.conf (Apache) and i change the line from ServerName oserver.sbsrv.local to ServerName www.mycompany.com and i get something like, that : ??????: ??? ???? ?????? ? ???? ????????????? ??????? ??? ?? ???? ??????
Question:
How can I map the internal domain: oserver. sbsrv. local (IP 192.168. xx. xx) with public domain www. mycompany. com (IP 62. x. x. x) ?
thanks.
Message was edited by:
user543368I did this 3 or 4 years ago and set up the Web-Cache to act as a reverse proxy. There is a paper on Metalink that explains how to set it up but I do not have the Doc ID.
Also check out the White Paper that illustrates a different method. "Expose your Intranet Portal to the
Outside World in a Secured Manner
(aka. A Secured Inside/Outside Portal)" see http://www.oracle.com/technology/products/ias/portal/pdf/admin_security_1014_secured_inside_outside.pdf
BG... -
Raid 0 With Internal And External Different Size Drives??
So I want to setup a raid 0 with my computer setup but have some questions.
I have 3 external drives, 500GB, 2TB, and 1TB.
Can I partition the 2TB and 1TB and use the 500GB partition I make on each drive for the raid, so all 3 are 500GB?
Can I also partiton my 1TB internal hard drive in half and use the new partition in the Raid?
Am I going about the best way to set this up or will this not even work in the first place?
Thanks for any info and helping!!So basically I setup my iMacs drive and my external 1TB drive as a raid 1 and it will write the data to both drives at the same time right?
Correct.
Will this slow anything down at all?
Yes.
I gave up on TM myself.
Get carbon copy cloner to make an exact copy of your old HD to the New one...
http://www.bombich.com/software/ccc.html
Or SuperDuper...
http://www.shirt-pocket.com/SuperDuper/
Or the most expensive one & my favorite, Tri-Backup...
http://www.tri-edre.com/english/tribackup.html -
Skip mail signature for internal emails (same domain as me)?
Is it possible to set up the signature in Apple Mail (3.5) to be attached to all email EXCEPT for those going to internal recipients -- those that use the same email domain as myself?
Sorry to break the bad news here..
Since they are in the same Exchange org, it would be impossible to send it through an external relay server before the other user gets it.
Transport rule does not have an option to send it through an external relay if any conditions match. In fact, transport rule cannot control any routing behavior except modify some recipients.
This will be possible only by creating another org for newdomain.com users and using a smart host to send between each other. -
How to configure lion mail service with lion server settings
I've sucessfully setup outgoing mail but I keep getting "The server returned the error: The server "incoming.domain" cannot be contaced on port 110". What configurations for Lion Server and Mail incoming mail server do I need to receive mail?
Please also see:
How To Configure Workflow Notification Mailer To Send Email Notification For Only One Workflow Item type/Process? (Doc ID 786647.1)
Configuring A Notification Mailer Based On A Specific Item Type. (Doc ID 415723.1)
After Upgrade R12.1.3 All Alerts Are Completing With Signal 11 (Doc ID 1438919.1)
Oracle Alert Response Processing Is Not Working After R12.1.3 Upgrade (Doc ID 1505620.1)
Thanks,
Hussein -
My macbook pro 17" won't boot with internal or external
Hi there,
Having some trouble with my 17" Macbook pro. It's the 2009 version.
I was updating some things the other day and, when it restarted, it froze. And, every time after that, it froze.
I figured it was just a hard drive issue and tried to re install snow leopard, but, it wouldn't boot up from the disk.
i began to worry.
I used an external hdd to try and boot, it wouldn't boot.
I tried a different external drive (both of these booted successfully on another macbook) and that did not work either.
I then swapped out the hard drives with the internal hard drive, neither would boot.
It turns on fine, and gets to the white screen with the apple with all of the hard drives, but the spinning wheel never shows up, and nothing else happens.
It just sits there.
I booted in verbose mode and it just hung at the initial report... nothing else happened.
It won't boot in safe mode.
I've reset the pram and the smc.
It seems like a hardware problem, but that's really surprising, as before the problem with the update, it was working fine.
if anyone has any suggestions, I would be most grateful.
thanks in advance.berayen,
if you have Mac OS X 10.6.8 installed, then OS X Internet Recovery is unavailable to you.
Which model MacBook Pro do you have?
Maybe you are looking for
-
I sold my iPad on eBay. I mailed the item and the buyer claims to not have it. I did a factory reset before sending and it is not coming up in my cloud. Is there another way to retrieve it?
-
How do I put all my messages onto my Macbook to view them on there.
I have a lot of messages saved onto my iPhone 5 and I want to view a certain contact's messages (like scroll all the way to the top) but it takes a long time to do so since I have sent/recieved so many messages from them and I have them all saved, so
-
Hyperlinks Transfer to PDF From Publisher 2007??
My hyperlinks in Publisher 2007 are not transferring to PDF. I have done a video to better explain it: http://www.youtube.com/watch?v=4lsB0Pv_XCs. Thank you for any help you can give.
-
I've done the adprep32 on 2003 server standard for /forestprep, /domainprep, and /rodcprep without an error, as instructed by several docs on web. But in final stage of dcpromo on 2008 server standard, it fails with Active Directory Domain Service c
-
OK, so I really hope that this is just my machine acting up, but I have been able to reproduce this bug, and I just want someone else to confirm it for me. I have a 16 page FW CS4 PNG, each page has a single bitmap on it, and when I open the Kuler pa