Friends,
I have one firewall with 4 NIC's , two are connected to ISP's (suppose ISP1 and ISP2) link and other two to 192.168.0.0 and 10.0.1.0 network and have in house mail server 192.168.1.8 running qmail.
Current setup is like this:
192.168.0.0-->ISP1 10.0.0.0 --->ISP2
Now my problem is:
When ISP1's link goes down i should be able to access mails using ISP2's link.
For this to work i have configured two mx entries in my DNS server one IP from ISP1 and other from ISP2.and assigned these two IP's to firewall. i'm able to ping to these IP's from outside.
Now when ISP1's link is down, i'm able to ping firewall with IP of other ISP2. but not able to access mails.
1. In this situation How should i configure the firewall to accesss mails in case of link failures.
2. Will i need routing to be configured for this setup to get it working.
hope any one answers this query.
Regards, Vijay
--------------------------------- Yahoo! India Answers: Share what you know. Learn something new Click here Catch all the FIFA World Cup 2006 action on Yahoo! India Click here
On 06/07/06 10:37 +0100, Vijay Kale wrote:
Friends,
I have one firewall with 4 NIC's , two are connected to ISP's (suppose ISP1 and ISP2) link and other two to 192.168.0.0 and 10.0.1.0 network and have in house mail server 192.168.1.8 running qmail.
Current setup is like this:
192.168.0.0-->ISP1 10.0.0.0 --->ISP2
Now my problem is:
When ISP1's link goes down i should be able to access mails using ISP2's link.
For this to work i have configured two mx entries in my DNS server
MX records are for external MTAs to send mail to you. They don't help MUAs access your mail. A better definition of "access" email would help though.
one IP from ISP1 and other from ISP2.and assigned these two IP's to firewall. i'm able to ping to these IP's from outside.
Now when ISP1's link is down, i'm able to ping firewall with IP of other ISP2. but not able to access mails.
- In this situation How should i configure the firewall to accesss
mails in case of link failures.
- Will i need routing to be configured for this setup to get it working.
Me? I would use BGP for link failure issues. Announce your own IP block and route it via both networks.
Devdas Bhagat