[quote user="dilberts_left_nut"]What is your solution, just out of interest?
[/quote]
ok. So the problem is that I have an Exchange server hosting domains DomainB.com and DomainC.com. It's on a private address of 10.1.0.2 behind NAT, which has a public address of a.b.c.d . I wanted all the inbound mail for DomainB and DomainC to be relayed through a Mercury server at 10.1.0.3, before reaching the Exchange host, where I could take advantage of SpamHalter, the Content control and Blacklist definitions.
My solution is to run the Mercury server with DomainA as a local domain. The only accounts in DomainA the admin account and spam & nospam for SpamHalter. From the outside world, connecting to port 25 on the firewall, ie a.b.c.d:25 results in a connection to the Mercury server. Incoming SMTP connections cannot connect to the Exchange server. As far as the outside world is concerned, the MX records for all 3 domains refer to a.b.c.d . Mercury is configured to act as an open relay, but, there are Global Filtering rules to theis effect:
If the 'To' field header contains the text '@DomainA.com' Exit from rule processing.
If the 'To' field header contains the text '@DomainB.com' Exit from rule processing.
If the 'To' field header contains the text '@DomainC.com' Exit from rule processing.
If the 'To' field header contains the text '@' Delete the message.
So, the only mail that will survive, will be that that's supposed to be relayed to DomainB or DomainC. Plus, I can send corrections to spam@DomainA.com and nospam@DomainB.com.
The last bit of the setup is that the Mercury host is configured to use a DNS server on the private network which has MX records for DomainB & DomainC refering to 10.1.0.2.
The Exchange server is free to make outbound SMTP connections and can therefore deliver mail to anywhere.
It seems to do what I want, although Thomas says that the filters don't work too well. I'd be interested to know in what situations, if any, they don't work.
Regards,
Richard
[quote user="dilberts_left_nut"]What is your solution, just out of interest?
[/quote]
<p>ok. So the problem is that I have an Exchange server hosting domains DomainB.com and DomainC.com. It's on a private address of 10.1.0.2 behind NAT, which has a public address of a.b.c.d . I wanted all the inbound mail for DomainB and DomainC to be relayed through a Mercury server at 10.1.0.3, before reaching the Exchange host, where I could take advantage of SpamHalter, the Content control and Blacklist definitions.</p>
<p>&nbsp;</p>
<p>My solution is to run the Mercury server with DomainA as a local domain. The only accounts in DomainA the admin account and spam &amp; nospam for SpamHalter. From the outside world, connecting to port 25 on the firewall, ie a.b.c.d:25 results in a connection to the Mercury server. Incoming SMTP connections cannot connect to the Exchange server. As far as the outside world is concerned, the MX records for all 3 domains refer to a.b.c.d . Mercury is configured to act as an open relay, but, there are Global Filtering rules to theis effect:
If the 'To' field header contains the text '@DomainA.com' Exit from rule processing.
If the 'To' field header contains the text '@DomainB.com' Exit from rule processing.
If the 'To' field header contains the text '@DomainC.com' Exit from rule processing.
If the 'To' field header contains the text '@' Delete the message.
So, the only mail that will survive, will be that that's supposed to be relayed to DomainB or DomainC. Plus, I can send corrections to spam@DomainA.com and nospam@DomainB.com.
The last bit of the setup is that the Mercury host is configured to use a DNS server on the private network which has MX records for DomainB &amp; DomainC refering to 10.1.0.2.
The Exchange server is free to make outbound SMTP connections and can therefore deliver mail to anywhere.
</p>
<p>It seems to do what I want, although Thomas says that the filters don't work too well. I'd be interested to know in what situations, if any, they don't work.</p>
Regards,
Richard