>Does anyone have minimal mods to the Sun sendmail configurations for both a
>firewall SMTP gateway and an internal POP machine WITH the case of using
>DNS libraries instead of NIS/hosts ? Or perhaps a good pointer to a
>reference with good concrete examples ? Required DNS database additions
>might be helpful also if anything significant needs to happen there.
John,
I do have modifications but they won't work for you unless the DNS on
your firewall is set up like ours. This is the set-up: There are two DNS
servers, one internal and one external who both think they are authoritative
for the domain, but their zone files are different. The internal server has
the normal info for internal machines (A, MX) while the external server has
a wildcard MX for the whole domain to the SMTP proxy and A records for all of
the firewall machines. All resolvers in the domain point to the inside server,
while Internet machines query the outside server. The internal server is a
slave forwarder to the external machine.
Mail then works like this: when the SMTP proxy receives mail, he sends it
directly to the internal mail hub (your POP server) if it is destined for the
local domain, else he looks up the destination in the DNS and sends it to the proper
external mail exchanger. When the internal mail hub receives mail he sends it
to the proxy if it is not destined for the local domain, else he looks it up in
DNS and sends it to the proper internal destination. All mail then goes through
the mail hub even if it is internal machine to internal machine (this isn't
necessary, it's just easier so you don't have to make major mods to all internal
machines).
I will send the files to you directly. Anyone else interested can ask.
Tom
------------------------------------------------------
Thomas R. Ries Voice: (703) 883-5500
Networking Tech. Center FAX: (703) 883-7142
The MITRE Corporation
MS W657, McLean, VA 22102
tries @
gateway .
mitre .
org
------------------------------------------------------
References:
|
|