Page 1 of 1

Scalix 11.0.4 behind a NAT

Posted: Mon May 14, 2007 3:22 pm
by hardaur
I haven't found anything here, so if I did miss something, please post a link.

My setup is this: I have a firewall up with an external address configured for my scalix box, on the local network I have the scalix box with a 192.168.0.x address. The DNS is configured, of course, with the external address and the appropriate ports (25, 80, 443, and 143) are forwarded to the scalix box.

During install, I'm having a hell of a time getting the network test to pass with this configuration. Can anybody offer me up any tips on how the DNS and /etc/hosts file should look to get my network test to pass? Are there any other concerns with this type of configuration?

Thanks a TON for any assistance,

H

P.S. OS is CentOS 5, using the RHEL 5 install.

Posted: Mon May 14, 2007 5:13 pm
by Shredder
DNS should point to the DNS of the network. From what you said, you have it pointing to the external IP of the firewall.

Shredder

Posted: Mon May 14, 2007 6:02 pm
by hardaur
I don't have an option in that regard. The network situation looks something like:

172 network = external (ie, internet at large)
192.168 network = internal

172.20.10.10 DNS server
172.10.10.1 firewall address (external, just showing you this so that it's clear that the firewall is handling multiple external addresses)
172.10.10.2 scalix box external address (proxy arp, through firewall)
192.168.1.1 firewall lan address
192.168.1.2 scalix lan address.

so DNS points to 172.10.10.2 which the firewall then forwards the ports to 192.168.1.2.

That make more sense?

H

Posted: Mon May 14, 2007 6:12 pm
by Shredder
In that case, that will not work for you.

It makes more sense to have an internal DNS server.

You will need to then make an entry into your /etc/hosts file for the scalix server with the internal IP address.

To actually receive mail, you will have to create an MX record pointing at your outside IP address.

Shredder

Posted: Mon May 14, 2007 7:04 pm
by hardaur
Ahh, so scalix itself really has no need to know of it's external address? I guess that makes sense, just for some reason had it in my head there was some magic going on in there.

Thanks a ton!

H