This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Postfix server in DMZ behind ASG 6 box setup

I've setup a mail server in my DMZ behind my Astaro Security Gateway 6 machine.  What do the NAT settings need to be for this box to receive mail?  I've gotten ASG setup so I can host a webserver in the DMZ and can SSH into a box, but the mail server setup has got me a bit confused.

I'm using ZoneEdit as I have a dynamic IP assigned by my ISP.  I've setup the MX record to point the mail server in my DMZ.  I also have another box in my DMZ doing local DNS and I've also created an MX record there for the mail server box and both ZoneEdit and my local DNS box have 'A' records for the mail server as well.

The message I receive when I try to send mail to an account on the mail server box is:

Host or domain name not found.  Name service error for  name=mail.mailserverbox.com type=A: Host not found

Thanks!

This thread was automatically locked due to age.

0 SilverOne over 18 years ago

Have you setup the smpt proxy? (Astaro 6) and point this to the mailserver in your DMZ.
Cancel
Vote Up 0 Vote Down

Cancel
0 tr3y over 18 years ago in reply to SilverOne

No, I have not. I guess my question really is:

What changes/entries do I need to make (and where) to allow for mail to be sent out from my mail server in the DMZ and to receive mail (IMAP primarily, but maybe POP3 later)?

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 tr3y over 18 years ago in reply to tr3y

So for example, do I need to allow all IMAP and SMTP traffic *in* to the mail machine in the DMZ as well as *out* from the mail machine in the NAT settings? Plus it sounds like I also need to setup SMTP proxy as well as NAT settings?
Cancel
Vote Up 0 Vote Down

Cancel
0 SilverOne over 18 years ago in reply to tr3y

Tr3y,

For SMTP; setup the smtp-proxy and connect to server in the DMZ.(Rule will set automatically).

For IMAP/POP3 etc. you have to define Packet filter rules in combination with a DNAT rule to the server in the DMZ.
Cancel
Vote Up 0 Vote Down

Cancel