MX and Split DNS

[Laurent Verhoest]

your mail servers (sendmail I presume) and DNS servers should be
configured like this I guess :

on the firewall :
use a relay pointing at your internal mail server for local delivery
(macro MH in /etc/sendmail.cf).
your firewall should resolve name querying the internal DNS (to get the
right MX)

on the internal :
use a smart host pointing at your firewall for outgoing mail (macro MS
in /etc/sendmail.cf, and you can disable MX lookup by enclosing the name
into brackets : 'MS[gateway]'.
your internal DNs should forward unresolved queries (external ones thus)
to your firewall.

--
Laurent Verhoest.

System administration is like keeping trains on time.
Nobody ever notice the trains, except when they're late.


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.