Virtual Webserver Hosting on CSS / CSM and ACE

Hello,
i've a big project on my company.
There shoul'd b e set up about 8 Servers, with 14 virtual Servers on each machine.
Each virtual webserver shout get it's own IP Address.
But this is not the end, they would need more virtual Servers over time.
So the we will use 112 IP Adresses the first time, and about up to 200 for later use.
There shoul'd be implemented many domains. Each Domain should be hostet on 2-8 virtual Webservers depending on the load of the site.
I've read about the Virtual Web Hosting Application Guide:
http://www.cisco.com/en/US/customer/products/hw/contnetw/ps789/products_tech_note09186a0080094b4d.shtml
As i understand, i can configure the 8 Servers with an IP Addressrange of 20
10.1.1.10 - 10.1.1.29 for Server 1
10.1.1.30 - 10.1.1.49 for Server 2
and so on....
code:
service web1
ip address 10.1.1.10 range 20
And i can configure a content rule with an VIP Range of 20
10.1.255.10 - 10.1.255-39
content L4_HTTP
vip address 10.1.255.10 range 20
port 80
So as i understand, if client requests virtual IP 10.1.255.10 it will be directed to the Server1 with 10.1.10 or Server 2 with 10.1.1.30.
Or with by requesting 10.1.255.12 it will be directed to Server 1 with 10.1.1.12 or Server 2 10.1.1.32.
As i read, only the first IP Adress will be used for Keepalive checks. How can i check if all virtual Servers are operating? May, there will be shut down only one virtual webserver on a machine and not all.
Is it also possible to do such things on CSM or ACE?
Also my CSS is not directly connected to the Servernet. Does this configuration work if there is a router between the CSS and the Server?
Is there another solution for such things? What would you recommend?
Sven

Sven,
I would not go with the range option.
You should looks each ip as a separate server weither this is a virtual or real server.
Configure a service for each ip with its own keepalive and configure a content rule for each domain and assign the services accordingly.
The config will be bigger but it is easier to see what's going on and to do modification and to troubleshoot.
Maybe you could use CVDM for operating the config and do modification.
Gilles.

Similar Messages

  • CSS/CSM to ACE conversion tool

    Hi,
    Are there any plans to release a standalone CSS/CSM to ACE config migration tool? (just like the CatOS to IOS tool)?
    thanks,
    Andrew.

    Currently, there isn't one available yet, the conversion tool is embedded into the software image of the ACE. Not sure if there are plans to make it standalone, I have been looking for those answers as well.

  • Is it legal to use Macintosh virtual machine hosted by Windows operating system? If yes, please suggest recommended hardware and license cost?

    Is it legal to use Macintosh virtual machine hosted by Windows operating system? If yes, please suggest recommended hardware and license cost?

    steve359 wrote:
    I thought that at least some version of OSX could not be VM in Mavericks, but if you say it is allowed so be it.
    There are some people who dispute the details of what "the software" means in the license. From my point of view, I have a license to run all of those versions each license explicity says I can use a VM. I don't think it is illegal or even unseemly. The only version restriction I know of that the new VM policy only applies to Lion or greater. 10.6 could only be run on a VM if you had the expensive server version. The licenses do explicity list the acceptable uses and that includes OS X Server, software development, and non-commercial use. They don't want people selling online access to OS X, that's all.
    I do not VM Windows on my MBP because I have no need.
    Me neither. I used to though. Funny how a Mac was the most critical tool in debugging web sites on various versions of IE
    I don't even run OS X in a VM anyway. It does work but it is quite resource intensive. Maybe if I had one of those new Mac Pros...

  • Cisco CSS and ACE study guide

    Hi,
    Im ready to kick start Cisco CSS and ACE load balancers. I found that 642-972 DCASD and 642-975 DCASI are the relevant exams for that. But, they are expired now. And, I couldn't even find the old materials for those. Could you please anyone assist me in getting started with this?

    Hi Kanwal,
    Thanks for your reply. BTW, wasn't there any specific study guides for 642-972 DCASD and 642-975 DCASI from Cisco? The reason behind this question is, I want to go step by step starting from how load balancing works, the basics and terminologies of load balancing and its various options and operations etc. I have been working with Network Security and just stepping in to DC operations.

  • CSS and ACE appliance SSL TPS

    Hi,
    Can someone explain how are SSL Transactions per second calculated on CSS and ACE?
    We need to select appropriate SSL license needed for future ACE appliance, wich is defined in terms of TPS.
    We also currently have CSS device with SSL module. Is there any way to find current SSL TPS info on a CSS device?
    Thank you and regards,
    Jasmina

    What is the method used to calculate SSL TPS requirement.
    example,
    Current: Peak SSL Transactions  6,000
    If I expect a peak concurrent connection of 200,000 what would be the methodology for calculating SSL TPS needs. (Some sample calculation steps would be appreciated.)
    Can I interpret the licensing as follows,
    SSL TPS: SSL Transactions per second: Number of NEW transactions that can be setup by ACE per second. (Does this mean established SSL transactions are not counted by the license, though each of the packets in established transactions require SSL termination!)
    Thanks
    Sri

  • Set up reverse DNS for virtual mail hosting

    I need a bit of server configuation advice.
    I have a static IP and two public domains on a Snow Leopard server connected using NAT behind a firewall - with the necessary port forwarding to ensure all works. 
    1. abc.com is my primary domain on the server - server.abc.com
    2. I have xyz.com set up as a virtual domain and also as a virtual mail host
    This setup has worked well for a long time but I have found that emails to [email protected] are going missing.  If I check my mx records using one of the web based tools it show an error on the reverse dns for server.xyz.com showing a reverse DNS of server.abc.com.
    So the question - is it possible to have secondary 'virtual' DNS record on the server so reverse DNS works for the virtual mail host xyz.com?  If not how do I handle the reverse DNS problem which i think is causing some external mail server to reject mail due to the inconsistency on the reverse DNS lookup?
    Many thanks for any suggestions

    SMTP requires a DNS A record.
    A DNS A record is also known as a machine record.
    A DNS A record inherently means that forward DNS and reverse DNS will match.
    The forward translation translates the host name to the IP address.
    The reverse translation translates the IP address to host name.
    When the full translation produces the same host name, that's an A record.
    DNS CNAME records are aliases, and are used for virtual hosts.
    CNAME records inherently do not match the reverse DNS translations.
    To get your configuration to work, your server must have an A record.
    That means forward and reverse DNS will match.
    Any of the virtual hosts within your mail server then all use an MX pointing at the A record host.
    If you have your DNS hosted somewhere other than your ISP, then you'll need your ISP to set up a DNS PTR.
    The DNS PTR is the reverse translation; address to name.
    If you have your own DNS services within your network (as would be typical with a privately-addressed NAT'd network), set that up as a virtual host within SMTP.
    Here is some related reading on external (public) DNS, as related to SMTP servers and such.

  • Error 10698 Virtual machine could not be live migrated to virtual machine host

    Hi all,
    I am running a fail over cluster of
    Host:
    2 x WS2008 R2 Data Centre
    managed by VMM:
    VMM 2008 R2
    Virtual Host:
    1x windows 2003 64bit guest host/virtual machine
    I have attempted a live migration through VMM 2008 R2 and im presented withe the following error:
    Error (10698)
    Virtual machine XXXXX could not be live migrated to virtual machine host xxx-Host01 using this cluster configuration.
     (Unspecified error (0x80004005))
    What i have found when running the cluster validation:
    1 out of the 2 hosts have an error with RPC related to network configuration:
    An error occurred while executing the test.
    Failed to connect to the service manager on 'xxx-Host02'.
    The RPC server is unavailable
    However there are no errors or events on host02 that are showing any probelms at all.
    In fact the validation report goes on to showing the rest of the configuration information of both cluster hosts as ok.
    See below:
    List BIOS Information
    List BIOS information from each node.
    xxx-Host01
    Gathering BIOS Information for xxx-Host01
    Item  Value 
    Name  Phoenix ROM BIOS PLUS Version 1.10 1.1.6 
    Manufacturer  Dell Inc. 
    SMBios Present  True 
    SMBios Version  1.1.6 
    SMBios Major Version  2 
    SMBios Minor Version  5 
    Current Language  en|US|iso8859-1 
    Release Date  3/23/2008 9:00:00 AM 
    Primary BIOS  True 
    xxx-Host02
    Gathering BIOS Information for xxx-Host02
    Item  Value 
    Name  Phoenix ROM BIOS PLUS Version 1.10 1.1.6 
    Manufacturer  Dell Inc. 
    SMBios Present  True 
    SMBios Version  1.1.6 
    SMBios Major Version  2 
    SMBios Minor Version  5 
    Current Language  en|US|iso8859-1 
    Release Date  3/23/2008 9:00:00 AM 
    Primary BIOS  True 
    Back to Summary
    Back to Top
    List Cluster Core Groups
    List information about the available storage group and the core group in the cluster.
    Summary 
    Cluster Name: xxx-Cluster01 
    Total Groups: 2 
    Group  Status  Type 
    Cluster Group  Online  Core Cluster 
    Available Storage  Offline  Available Storage 
     Cluster Group
    Description:
    Status: Online
    Current Owner: xxx-Host01
    Preferred Owners: None
    Failback Policy: No failback policy defined.
    Resource  Type  Status  Possible Owners 
    Cluster Disk 1  Physical Disk  Online  All Nodes 
    IP Address: 10.10.0.60  IP Address  Online  All Nodes 
    Name: xxx-Cluster01  Network Name  Online  All Nodes 
     Available Storage
    Description:
    Status: Offline
    Current Owner: Per-Host02
    Preferred Owners: None
    Failback Policy: No failback policy defined.
     Cluster Shared Volumes
    Resource  Type  Status  Possible Owners 
    Data  Cluster Shared Volume  Online  All Nodes 
    Snapshots  Cluster Shared Volume  Online  All Nodes 
    System  Cluster Shared Volume  Online  All Nodes 
    Back to Summary
    Back to Top
    List Cluster Network Information
    List cluster-specific network settings that are stored in the cluster configuration.
    Network: Cluster Network 1 
    DHCP Enabled: False 
    Network Role: Internal and client use 
    Metric: 10000 
    Prefix  Prefix Length 
    10.10.0.0  20 
    Network: Cluster Network 2 
    DHCP Enabled: False 
    Network Role: Internal use 
    Metric: 1000 
    Prefix  Prefix Length 
    10.13.0.0  24 
    Subnet Delay  
    CrossSubnetDelay  1000 
    CrossSubnetThreshold  5 
    SameSubnetDelay  1000 
    SameSubnetThreshold  5 
    Validating that Network Load Balancing is not configured on node xxx-Host01.
    Validating that Network Load Balancing is not configured on node xxx-Host02.
    An error occurred while executing the test.
    Failed to connect to the service manager on 'xxx-Host02'.
    The RPC server is unavailable
    Back to Summary
    Back to Top
    If it was an RPC connection issue, then i shouldnt be able to mstsc, explorer shares to host02. Well i can access them, which makes the report above is a bit misleading.
    I have also checked the rpc service and it has started.
    If there is anyone that can shed some light or advice me oany other option for trouble shooting this, that would be greatley appreciated.
    Kind regards,
    Chucky

    Hi all,
    I am running a fail over cluster of
    Host:
    2 x WS2008 R2 Data Centre
    managed by VMM:
    VMM 2008 R2
    Virtual Host:
    1x windows 2003 64bit guest host/virtual machine
    I have attempted a live migration through VMM 2008 R2 and im presented withe the following error:
    Error (10698)
    Virtual machine XXXXX could not be live migrated to virtual machine host xxx-Host01 using this cluster configuration.
     (Unspecified error (0x80004005))
    What i have found when running the cluster validation:
    1 out of the 2 hosts have an error with RPC related to network configuration:
    An error occurred while executing the test.
    Failed to connect to the service manager on 'xxx-Host02'.
    The RPC server is unavailable
    However there are no errors or events on host02 that are showing any probelms at all.
    In fact the validation report goes on to showing the rest of the configuration information of both cluster hosts as ok.
    See below:
    List BIOS Information
    List BIOS information from each node.
    xxx-Host01
    Gathering BIOS Information for xxx-Host01
    Item  Value 
    Name  Phoenix ROM BIOS PLUS Version 1.10 1.1.6 
    Manufacturer  Dell Inc. 
    SMBios Present  True 
    SMBios Version  1.1.6 
    SMBios Major Version  2 
    SMBios Minor Version  5 
    Current Language  en|US|iso8859-1 
    Release Date  3/23/2008 9:00:00 AM 
    Primary BIOS  True 
    xxx-Host02
    Gathering BIOS Information for xxx-Host02
    Item  Value 
    Name  Phoenix ROM BIOS PLUS Version 1.10 1.1.6 
    Manufacturer  Dell Inc. 
    SMBios Present  True 
    SMBios Version  1.1.6 
    SMBios Major Version  2 
    SMBios Minor Version  5 
    Current Language  en|US|iso8859-1 
    Release Date  3/23/2008 9:00:00 AM 
    Primary BIOS  True 
    Back to Summary
    Back to Top
    List Cluster Core Groups
    List information about the available storage group and the core group in the cluster.
    Summary 
    Cluster Name: xxx-Cluster01 
    Total Groups: 2 
    Group  Status  Type 
    Cluster Group  Online  Core Cluster 
    Available Storage  Offline  Available Storage 
     Cluster Group
    Description:
    Status: Online
    Current Owner: xxx-Host01
    Preferred Owners: None
    Failback Policy: No failback policy defined.
    Resource  Type  Status  Possible Owners 
    Cluster Disk 1  Physical Disk  Online  All Nodes 
    IP Address: 10.10.0.60  IP Address  Online  All Nodes 
    Name: xxx-Cluster01  Network Name  Online  All Nodes 
     Available Storage
    Description:
    Status: Offline
    Current Owner: Per-Host02
    Preferred Owners: None
    Failback Policy: No failback policy defined.
     Cluster Shared Volumes
    Resource  Type  Status  Possible Owners 
    Data  Cluster Shared Volume  Online  All Nodes 
    Snapshots  Cluster Shared Volume  Online  All Nodes 
    System  Cluster Shared Volume  Online  All Nodes 
    Back to Summary
    Back to Top
    List Cluster Network Information
    List cluster-specific network settings that are stored in the cluster configuration.
    Network: Cluster Network 1 
    DHCP Enabled: False 
    Network Role: Internal and client use 
    Metric: 10000 
    Prefix  Prefix Length 
    10.10.0.0  20 
    Network: Cluster Network 2 
    DHCP Enabled: False 
    Network Role: Internal use 
    Metric: 1000 
    Prefix  Prefix Length 
    10.13.0.0  24 
    Subnet Delay  
    CrossSubnetDelay  1000 
    CrossSubnetThreshold  5 
    SameSubnetDelay  1000 
    SameSubnetThreshold  5 
    Validating that Network Load Balancing is not configured on node xxx-Host01.
    Validating that Network Load Balancing is not configured on node xxx-Host02.
    An error occurred while executing the test.
    Failed to connect to the service manager on 'xxx-Host02'.
    The RPC server is unavailable
    Back to Summary
    Back to Top
    If it was an RPC connection issue, then i shouldnt be able to mstsc, explorer shares to host02. Well i can access them, which makes the report above is a bit misleading.
    I have also checked the rpc service and it has started.
    If there is anyone that can shed some light or advice me oany other option for trouble shooting this, that would be greatley appreciated.
    Kind regards,
    Chucky
    Raja. B

  • On VMM managed cluster hosts, I can't figure out why most of my hosts answer port 5900 and the others 2179, but not both

    Below, you see a netcat list of my hosts.  Most are answering port 5900, but not 2179.  The list on the bottom is answering 2179, but not 5900.  I need to know for 3 reason why this is, (1) to setup our enterprise firewall, (2) for port health
    monitoring of our hosts, and (3) just what is going on.  I thought that 2179 should be open on all hosts, and that 5900 was only used in legacy cases (at least from what I read from googling around).  Why aren't all of my hosts answering 2179?
    My hosts are all Server 2008 R2 Datacenter SP1 64-bit.  We have a mix of VMs with Server 2008 R2, Win7, and RHEL6, all 64-bit.
    Most answering 5900...
    [lhco-mshv01] Connection to lhco-mshv01 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv02] Connection to lhco-mshv02 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv03]
    [lhco-mshv05] Connection to lhco-mshv05 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv06]
    [lhco-mshv07]
    [lhco-mshv08] Connection to lhco-mshv08 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv09] Connection to lhco-mshv09 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv10]
    [lhco-mshv11] Connection to lhco-mshv11 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv12] Connection to lhco-mshv12 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv13] Connection to lhco-mshv13 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv14] Connection to lhco-mshv14 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv16]
    [lhco-mshv17]
    [lhco-mshv18] Connection to lhco-mshv18 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv19] Connection to lhco-mshv19 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv20]
    [lhco-mshv21]
    [lhco-mshv22] Connection to lhco-mshv22 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv23] Connection to lhco-mshv23 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv24] Connection to lhco-mshv24 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv25] Connection to lhco-mshv25 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv26] Connection to lhco-mshv26 5900 port [tcp/vnc-server] succeeded!
    [lhco-mshv27] Connection to lhco-mshv27 5900 port [tcp/vnc-server] succeeded!
    The others are answering 2179...
    [lhco-mshv01]
    [lhco-mshv02]
    [lhco-mshv03] Connection to lhco-mshv03 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv05]
    [lhco-mshv06] Connection to lhco-mshv06 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv07] Connection to lhco-mshv07 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv08]
    [lhco-mshv09]
    [lhco-mshv10] Connection to lhco-mshv10 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv11]
    [lhco-mshv12]
    [lhco-mshv13]
    [lhco-mshv14]
    [lhco-mshv16] Connection to lhco-mshv16 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv17] Connection to lhco-mshv17 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv18]
    [lhco-mshv19]
    [lhco-mshv20] Connection to lhco-mshv20 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv21] Connection to lhco-mshv21 2179 port [tcp/vmrdp] succeeded!
    [lhco-mshv22]
    [lhco-mshv23]
    [lhco-mshv24]
    [lhco-mshv25]
    [lhco-mshv26]
    [lhco-mshv27]

    Brian,
    This is specifically related to Hyper-V hosts, where the following ports may be used by the VMM to communicate to each host:
    VMConnect (RDP) to Hyper-V hosts 2179
    VMRC connection to Virtual Server host 5900
    These ports are outlined here...
    technet.microsoft.com/en-us/library/cc764268.aspx
    I am not running independent VNC servers on my hosts.  They are VMRC ports.  My confusion is why some of my hosts are only answering 2179, while the others are only answering 5900, but not both ports on all hosts (or for that matter just 2179 on
    all hosts).

  • Cisco CSM and WCS on same server

    Hi,
    Currently we are running Cisco CSM and Cisco WCS applications on different servers.
    Please let me know can it possible to install Cisco CSM and Cisco WCS on one server.
    Regards,

    As per their datasheet, both CSM and WCS support VMware or can run as virtual servers. So it should be possible to implement both as virtual servers and run on the same physical server.

  • How to create local virtual web host ex. myserver.local?

    Hi
    I'm sorry but following steps in Yosemite Server help led me to nowhere.
    Could you please explain how to create local virtual web host ex. myserver.local?
    Thanks

    Hi Sergey,
    I assume that you mean virtual desktop storage location, which I don’t think that we can change this setting for an existing collection.
    You can create a new collection, during the creation process, you will be able to select a different storage location for new VMs.
    More information for you:
    Single Image Management for Virtual Desktop Collections in Windows Server 2012
    http://blogs.msdn.com/b/rds/archive/2012/10/29/single-image-management-for-virtual-desktop-collections-in-windows-server-2012.aspx
    Geek of All Trades: VM-Hosted RemoteApps - New Best Practice for Virtual Desktops?
    https://technet.microsoft.com/en-us/magazine/jj554307.aspx
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • OT: Tutorial | How to author HTML, CSS, jQuery, and PHP 5.4 in Dreamweaver CC

    Hi all,
    Dreamweaver CC 2014 comes with a host of tutorials for both beginners and advanced users. In this tutorial you will learn how the latest support for HTML5, CSS3, jQuery and PHP5.4 in Dreamweaver can help you author static, dynamic, mobile or responsive projects.
    We would love to hear your opinion on this tutorial after you complete the training.
    https://helpx.adobe.com/dreamweaver/how-to/html-css-jquery-php-dreamweaver.html?scid=socia l26198776
    Thanks,
    Preran

    jlig wrote:
    > David, I just read thru the sample chapter 7 "Building
    Site Navigation with the
    > Spry Menu bar".
    > - Finally a Spry resource that is friendly , thorough
    and easy to follow
    > along.
    > - I especially like your honest comments in the "Mixed
    Blessing" section.
    Glad you found it useful. I felt it was essential to present
    a balanced
    view of Spry widgets, rather than giving a starry-eyed one.
    > Trying to adjust the Tab Colors, Fonts, CSS page sizes,
    margins, borders, etc
    > is a bit of a nightmare for me. I know it is just a
    matter of learning, but it
    > would help to have resources like yours that take all of
    the practical
    > considerations into mind for end-users.
    It is quite easy to do simple things with CSS, but it's very
    powerful,
    and has a long learning curve. Keep at it, and you'll get
    there in the end.
    > ps: How about a similiar new resource: "The Essential
    Guide to Dreamweaver
    > CS3 with ADDT, SPRY, CSS, AJAX and PHP / ColdFusion"
    I'm not a big fan of ADDT (Adobe knows my opinions, because I
    have told
    them directly). I would like to see how ADDT develops before
    committing
    to writing about it. As for ColdFusion, I experimented with
    it a long
    time ago, but decided I preferred to improve my knowledge of
    PHP before
    branching out into other fields.
    David Powers, Adobe Community Expert
    Author, "The Essential Guide to Dreamweaver CS3" (friends of
    ED)
    Author, "PHP Solutions" (friends of ED)
    http://foundationphp.com/

  • Virtual mail hosts: 255 character limit on SPF records

    This one was a surprise to me, and caused a lot of headache, so I thought I'd pass it along.
    I'm running multiple virtual mail hosts off of my doughty PowerMac single G5 1.8GHz running OS X Server 10.4.11. Some of the outgoing mail was being bounced as spam because a) there wasn't an SPF record on any of the domains and b) the domain of the mailserver didn't always match the domain of the sender. (Most often, it went out under the hostname of the server, cerberus.limbo.jcf.org—which is useless, since that's a LAN address.)
    Trying to be a good citizen (and make sure that all of everyone's mail got through), I added SPF records that explicitly named each and every mailserver on the machine, just so that everything was clear and aboveboard—but they ended up being about 500 characters long.
    Fastforward a week or two... and I was having problems with my DNS zones loading—I'd get errors that they'd timed out. After pulling my hair out for a while, I discovered that TXT records have a limit of 255 characters (including spaces, etc.) Some folks running servers on non-OS X Server machines have split the records over multiple TXT records (does that even work?), but you get exactly one TXT record per OS X Server machine: the Comment box.
    I've now simplified the SPF records so that they read something like this:
    +v=spf1 a mx mx:cerberus.limbo.jcf.org mx:cerberus.jcf.org mx:jcf.org ip:173.164.140.96/30 ip:207.58.140.213/30 include:comcast.businessclass.net include:comcast.com -all+
    To translate:
    • +v=spf1 a mx+ It authorizes deliveries from any IP listed in the DNS zone, and from any mailserver defined in the zone
    • +mx:cerberus.limbo.jcf.org mx:cerberus.jcf.org mx:jcf.org+ It also explicitly authorizes deliveries from the server's main LAN and internet DNS names as well as the domain of the foundation for which I work (and through which emails are occasionally relayed)
    • +ip:173.164.140.96/30 ip:207.58.140.213/30+ Next it authorizes the public static IP blocks for the server and the foundation's remote server
    • +include:comcast.businessclass.net include:comcast.com+ Finally it includes the domain names of the ISP through which most of the mail are relayed
    • -all The last item says that if the mail didn't originate from one of those addresses, it isn't ours.
    (I think that I've got that right. If I've botched it anywhere, let me know, okay?)
    That's 169 characters. The DNS zones loaded happily, and the mail seems to be going out without getting bounced. So far so good!
    (There's probably a way to get the hostname on each email to match the domain from which it is being addressed, but I haven't gotten there yet.)
    Message was edited by: David Kudler

    Most often, it went out under the hostname of the server, cerberus.limbo.jcf.org—which is useless, since that's a LAN address.
    You can control this via the myhostname setting in Postfix. This defines the name it uses to identify itself to remote mail servers, which sounds like it'll address a lot of your issues.
    I added SPF records that explicitly named each and every mailserver on the machine, just so that everything was clear and aboveboard—but they ended up being about 500 characters long.
    OK, this doesn't make sense. You don't need to list every virtual hostname for every domain.
    All you need to do is add this specific mail server's address in each domain.
    There's no requirement that the hostname of the mail server matches the domain name, so it's entirely valid to create an SPF record in domain1.com that lists mailserver.someotherdomain.com as authoritative. Then, as long as postfix's myhostname says it's mailserver.someotherdomain.com and your reverse DNS resolves to that address your problem is solved.
    ...but you get exactly one TXT record per OS X Server machine: the Comment box.
    Unless you edit your zone file directly and add whatever other records you like. However, given the above, I don't think the 255-character limit should be an issue.
    Even if you didn't want to mess with your zone files directly there's still a way around that - SPF allows for an 'include' record which basically tells remote servers to include the record from some other domain, so for each domain you could just tell it to include some other domain's record (which, in turn, could include another domain) allowing virtually unlimited record length (or, at least, 255 characters per domain you manage).
    SPF Includes are covered here.
    • include:comcast.businessclass.net include:comcast.com Finally it includes the domain names of the ISP through which most of the mail are relayed
    Bzzzz. You've now allowed any other customer of comcastbusiness.net and comcast.com to send mail on your behalf. You probably don't want to do that. When you consider that 'comcast.com' includes every one of their residential customers you can see that you really don't want to do that.

  • Migration from CSM to ACE

    What points need to be kept in mind while migrating from CSM to ACE? Configuration/hardware??? CSM at 2 sites with ft, what would be the best stratgy to minimize the downtime? illustrated steps would help alot and be appreciated...

    Hi Ahmed,
    You should test ACE in pre-production environment before putting them in production. There will be connection break since you are moving from one device to another.Not sure of any way we will not have an outage. But you should have a roll back plan and ensure that you have a MW while you are migrating. I don't see any documented procedure to migrate other than that tool which helps you in converting the CSM config to ACE.
    Regards,
    Kanwal

  • Difficulty with Virtual Named hosts on Web Ser

    I am having a difficult time with creating Several Virtual Named Hosts with Apache2. I am trying not to use the Apache Manual modifications to the config file, sothat I can stil manage cia Server Admin. I am running OSX 10.5.2 and have several domains registered . Additionally I have a DNS Server running on the Xserver the primary zone is yadayadayada.com with zone as follows;
    yadayadayada.com. Primary Zone
    www.yadayadayada.com. ALIAS yadayada.com.
    machineyada Machine 74.11.11.11
    HomePage Service machineyada.yadayadayada.com:80
    I have reverse Zones, and a Secondary zones setup for my DSL Service provider and my Domain host. I have two DSL Lines setup using a Cisco router , the cisco router provides DHCP , and multiplexes the two DSL lines to share bandwidth.
    the web is setup as follows;
    Domain_Name Address Port
    * 80
    yadayadayada.com. * 80
    yadayadayada1.com * 80
    I dont have Realms setup and all other Web config parameters are set as default
    my name servers are registered , and have propagated verified by a nslookup. I have them setup to point to the same phydical server using the multiplexed ip adresses i.e.
    ns1.yadayadayada.com 74.11.11.11
    ns2.yadayadayada.com 74.11.11.12
    when I browse to either www.yadayadayada.com or www.yadayadayada1.com I get the default website, when the default web is deactivated i receive server not available .
    According to the documentation once you have a unique domain name and a Zone for that domain you should be able to host multiple Named Virtual hosts, however after explicitly following the "Vague" directions I am still not able to get the configuration to return the correct sites. does anyone have any experiance with Virtual Named hosts, or must i resort to the Apache Docs ?
    Thanks for the assistance in advance.

    Obfuscating the domain name often leads to confusion - for example are errors introduced via typos in the obfuscation?
    Given the information that you've posted, your DNS isn't setup correctly.
    You're trying to access 'www.yadaydayada.com', but you don't have any 'www' record in your 'yadayadayada.com' zone file. However, since you seem to get a response from the web server clearly you have some kind of additional DNS setup that you're not posting here.
    In any case, as far as Apache is concerned, there is no relationship between 'yadayadayada.com' and 'www.yadayadayada.com'. They are two completely different hostnames and I wouldn't expect Apache to serve yadayadayada.com's web site when you're trying to access 'www.yadayadayada.com'. You'll need to either assign a server alias for the other domain, or add an additional Virtual host for 'www.yadayadayada.com' (and make sure the DNS points to the right place, of course).

  • Virtual Named Hosts

    I am having a difficult time with creating Several Virtual Named Hosts with Apache2. I am trying not to use the Apache Manual modifications to the config file, sothat I can stil manage cia Server Admin. I am running OSX 10.5.2 and have several domains registered . Additionally I have a DNS Server running on the Xserver the primary zone is yadayadayada.com with zone as follows;
    yadayadayada.com. Primary Zone
    www.yadayadayada.com. ALIAS yadayada.com.
    machineyada Machine 74.11.11.11
    HomePage Service machineyada.yadayadayada.com:80
    I have reverse Zones, and a Secondary zones setup for my DSL Service provider and my Domain host. I have two DSL Lines setup using a Cisco router , the cisco router provides DHCP , and multiplexes the two DSL lines to share bandwidth.
    the web is setup as follows;
    Domain_Name Address Port
    * 80
    yadayadayada.com. * 80
    yadayadayada1.com * 80
    I dont have Realms setup and all other Web config parameters are set as default
    my name servers are registered , and have propagated verified by a nslookup. I have them setup to point to the same phydical server using the multiplexed ip adresses i.e.
    ns1.yadayadayada.com 74.11.11.11
    ns2.yadayadayada.com 74.11.11.12
    when I browse to either www.yadayadayada.com or www.yadayadayada1.com I get the default website, when the default web is deactivated i receive server not available .
    According to the documentation once you have a unique domain name and a Zone for that domain you should be able to host multiple Named Virtual hosts, however after explicitly following the "Vague" directions I am still not able to get the configuration to return the correct sites. does anyone have any experiance with Virtual Named hosts, or must i resort to the Apache Docs ?
    Thanks for the assistance in advance.

    Obfuscating the domain name often leads to confusion - for example are errors introduced via typos in the obfuscation?
    Given the information that you've posted, your DNS isn't setup correctly.
    You're trying to access 'www.yadaydayada.com', but you don't have any 'www' record in your 'yadayadayada.com' zone file. However, since you seem to get a response from the web server clearly you have some kind of additional DNS setup that you're not posting here.
    In any case, as far as Apache is concerned, there is no relationship between 'yadayadayada.com' and 'www.yadayadayada.com'. They are two completely different hostnames and I wouldn't expect Apache to serve yadayadayada.com's web site when you're trying to access 'www.yadayadayada.com'. You'll need to either assign a server alias for the other domain, or add an additional Virtual host for 'www.yadayadayada.com' (and make sure the DNS points to the right place, of course).

Maybe you are looking for

  • What's with the compiz-fusion/compiz that won't update?

    On running an -Syu I get this.. : Synchronising package databases... core is up to date extra 311.1K 458.8K/s 00:00:01 [#####################] 100% community is up to date compiz-fusion is up to date archlinuxfr is up to date :: Starting full system

  • Color & external hard drive

    Hi, I have Final Cut Pro set for external hard drives but for the life of me I cannot get color to do the same. I see all my applications, desktop but I cannot see my LaCie external hard drives. How do I set color to go there? Hope this makes sense!

  • Videos app loads black screen

    Now whenever I load the Videos app the screen turns black, I left it for a few minutes and still black, I restarted the device and still have the same issue. Worked well before even after the iOS 4.2 update. I'll try to restore when I get home from w

  • Ora.reco.acfsvol.acfs only on one node on RAC on ODA

    We have an ODA (old model) and by a power failure in the data center both boot disks in one node are we gone faulty. After replacing the chassis, RAID controllers and disks (Oracle Filed Engenieer) reports crsctl stat res -t following: [grid @ XXXXXX

  • How to share out web Documents folder in read/write mode

    I have a MacPro at work with Mac OS X 10.5.1 sitting on a network with a static IP address which is accessible via the Internet with few restrictions. This Mac does not use the built-in firewall; it is off. I regularly use my Mac at home to update a