message relay changed to endpoint

Question

Hello all 
 
 We have just set up our new Sophos Environment with 2 Servers. 1x SEC Server in LAN, 1x Message Relay Server in DMZ. Everything worked fine but now we have a strange problem: 
 Our message relay Server changed into an endpoint. 
 Any ideas how we can revert this behaviour? 
 thx

QC · Accepted Answer

Hello Tommy Rohner , 
 seems almost correct, but only almost. 
 If all endpoints update from \server2 then all would use server2 as message relay - probably not what you really want 
 If server2 updates from server1 it would use the mrinit.conf with "ParentRouterAddress"="Server1" . The logic is as follows: If RMS finds its host's IP or name in at least one of the MRParentAddress es it knows it's on the management server. If there's a match with at least one of the ParentRouterAddress es it configures itself as relay. Otherwise it's on an endpoint and uses ParentRouterAddress as upstream router. 
 So if I understand you correctly - it is clear why the SUM/MR acts as endpoint. 
 Christian

QC · Answer

Hello Tommy Rohner , 
 is it still necessary to copy the mrinit.conf files in rms subfolders? normally mrinit.conf is in the CID's root. It's applied during initial installation, later changes are ignored. If you want to "redirect" already protected endpoints putting it into the \rms subdirectory is one way to achieve this. If the the correct mrinit.conf was used for the initial install of the SUM, MR and the endpoints the copy isn't necessary. Please note that you can't have CIDs with different mrinit.conf in the root directory on the same server and that changes to mrinit.conf in a CID's root do not persist as a SUM (over)writes the mrinit.conf from the location defined in the tag <RMSConfigPath> in %ProgramFiles(x86)\Sophos\Update Manager\system.xml to the root when deploying (updating) a share. 
 Christian