LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 11-21-2003, 10:00 AM   #1
swingheim
LQ Newbie
 
Registered: Sep 2003
Posts: 10

Rep: Reputation: 0
DNS/email issues inside and out of LAN


I have completed setting up qmail on my LAN, and have the firewall properly forwarding SMTP and POP to it, but I am not sure how to configure roaming users.

Details: on the LAN, the email box is 192.168.1.3. I added an entry in their HOSTs file which says

192.168.1.3 mail.companyname.com

BUT, what do I do when a laptop user leaves the company, and wants to POP their email from home? Yes, they are window$ users. I thought that HOSTS under windows would fail at home (since 192.168.1.3 doesn't exist) and then would hit their DNS server to resolve mail.companyname.com. But, I was wrong.

So, I have looked into setting up a DNS server on our firewall so that on the LAN, it would resolve mail.companyname.com to 192.168.1.3, and in the outside world, everything would work fine since the MX records are properly set.

Is this the right approach? Or is there an easier way?

(I apologize for posting this question here... couldn't really find adequate search terms for google)
 
Old 11-21-2003, 02:04 PM   #2
jcookeman
Member
 
Registered: Jul 2003
Location: London, UK
Distribution: FreeBSD, OpenSuse, Ubuntu, RHEL
Posts: 417

Rep: Reputation: 33
If you set up DNS to point to the outside IP then it sould work no matter where the request originates, as long as the proper ports are forwarded.

If the request happens from outside the protected network then that is pretty straightforward. However, if the request originates from within the network then the router/firewall ICMP will redirect the client to the internal server because the router is "smart" enough to know.
 
Old 11-21-2003, 05:05 PM   #3
dorian33
Member
 
Registered: Jan 2003
Location: Poland, Warsaw
Distribution: LFS, Gentoo
Posts: 587

Rep: Reputation: 32
I see the problem in non-routeable 192.168.x.x address. You can use this address class only inside LAN.
But if qmail is working correctly and it can accept mails from "the world" it means it works with public IP. Am I right? If so you should bind the public IP with ' mail.companyname.com' and using iptables build the possibility of using this address from inside and outside the LAN as well.
 
Old 11-22-2003, 12:45 PM   #4
swingheim
LQ Newbie
 
Registered: Sep 2003
Posts: 10

Original Poster
Rep: Reputation: 0
Perhaps I didn't explain well enough...

mail.company.com points to the external IP of the firewall.

inside the network, if you point your mail client to mail.company.com, it resolves to the external IP of the firewall, then errors out, since the request is originating from the LAN. The IP of the firewall internally is 192.168.1.1.

The firewall is running RedHat Linux -- perhaps I need to configure the firewall rules to say "All requests from internal going to remote firewall IP, redirect to internet firewall IP" Or something like that.

Thanks for the input though....
 
Old 11-22-2003, 01:02 PM   #5
jcookeman
Member
 
Registered: Jul 2003
Location: London, UK
Distribution: FreeBSD, OpenSuse, Ubuntu, RHEL
Posts: 417

Rep: Reputation: 33
You need to forward the the SMTP and POP ports from the external IP to the internal server's IP. When you make a request from inside the LAN, the DNS server will resolve to the external IP. Next, your client will attempt to make a TCP connection to the external IP, but the firewall/router's ICMP will send a redirect back to the client telling it to connect to the internal 192.168.x.x address.

I know that routers handle this type of setup nicely.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
iptables inside client to inside host with outside DNS or IP - Help! linuxhelp2 Linux - Networking 1 10-15-2005 06:19 AM
Networking. D-Link DSL G604T LAN DNS issues. limes.whatlimes Linux - Networking 4 09-21-2005 03:49 AM
Server from inside LAN andrewjjones Linux - Networking 53 04-22-2005 02:07 PM
pop3 inside and outside LAN clinger Linux - Software 2 03-20-2004 10:55 AM
Email client recommendations? Specific needs inside... King V Linux - Software 0 03-24-2003 07:28 PM


All times are GMT -5. The time now is 09:58 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration