Routing For New Email Server

[estone4009]

Here is my secnario: I want to host my mail in house. I have an ISP that provides me 5 static IP's. Our first IP goes to a cisco 1601 router and then is forwarded to a sonicwall xprs2 which uses the second IP. I know that in the sonicwall I can setup a pulic LAN server and forward the SMTP and POP3 ports to an internal address. But I can I point a third unique IP address to that email server? Or does me m DNS server IP just need to be set to my sonicwall firewall IP?

 

[ChrisAC]

You have two choices ..

1. Do port forwarding from the firewalls external address to the LAN address of the mail server. Your MX record would be the firewalls address.

2. Create a static NAT on the firewall to use one of your other addresses out of your /29 pool so that your mail server is using a dedicated address and not the firewalls address. Your MX record then points to this address.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[estone4009]

Is one of these solutions more secure than the other?

 

[lgarner]

No, assuming that you only permit port 25 in to the mail server in the second option.

 

[estone4009]

I know my firewall will do the first option. (Sonicwall XPRS2) But I'm not sure if it can do the second option.

 

[ChrisAC]

Go with the first option then. It should work just fine.

Chris.


**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************