- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hello everyone,
Today I setup MTA on the sandbox appliance.
I'm looking for a setup example with multiple exchange servers that MTA should forward mails to. How to set it up properly? Currently, MTA forwarding messages only to one EXC server, and I need some load balancing between 4 EXCHANGE servers.
Greetings.
I really appreciate any help you can provide.
Click the Next Hop cell and select the node object that is the mail server for this rule.
Note - From R80.20, you can define a domain object as the Next Hop. This lets you use multiple mail servers based on a DNS name. This DNS configuration allows load balancing and high-availability capabilities based on DNS configuration.
yes, you have to setup one dns alias with four IPs for your "mailserver.domain.com". If you define a FQDN-Domainobject with name ".mailserver.domain.com" (be sure to check the FQDN box) this will match for "mailserver.domain.com" and "www.mailserver.domain.com". The additional match for the leading "www." is an automatic behaviour.
Be aware that this is not a really HighAvailibility, it's DNS round robin only. If one of the mailservers did not response the messages are not delivered.
Wolfgang
Click the Next Hop cell and select the node object that is the mail server for this rule.
Note - From R80.20, you can define a domain object as the Next Hop. This lets you use multiple mail servers based on a DNS name. This DNS configuration allows load balancing and high-availability capabilities based on DNS configuration.
Thank you Chris!
Hi, I'm curious how this went for you as we'll have to do something similar in the near future. Did you setup four entries in your dns all with the same name (mail.domain.com)? One for each of your four exchange servers. I'm not familiar with Checkpoint domain objects, from what I understand if you put .domain.com, it'll match www.domain.com or domain.com. How do you make it match your mail.domain.com?
yes, you have to setup one dns alias with four IPs for your "mailserver.domain.com". If you define a FQDN-Domainobject with name ".mailserver.domain.com" (be sure to check the FQDN box) this will match for "mailserver.domain.com" and "www.mailserver.domain.com". The additional match for the leading "www." is an automatic behaviour.
Be aware that this is not a really HighAvailibility, it's DNS round robin only. If one of the mailservers did not response the messages are not delivered.
Wolfgang
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY