This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMTP Routing via 'Additional Address'

We have a range of external IP addresses, one of which is allocated to our MX record, I need to be able to send email out using that IP not the main WAN IP. At the moment some recipients are doing strict SPAM checking and rejectin our email as the originating IP does not match the MX Record.

All the related articles I have seen are many years old and refer to the Astaro device, the menus and solutions suggested do not apply or do not work.

So in summary our email goes out now on WAN I need it to go out on WAN-Additional_Address_MX_IP

Chees

SImon



This thread was automatically locked due to age.
Parents
  • A SNAT might work, but I am not optimistic.

    The easiest solution is to change the MX record, or add another one, so that the used IP address is authorized.

  • Thanks Douglas - simple idea, went back to my DNS records checking the spf record ready to add the other IP - ooops had it as part of a range - but had typed it wrong! So had planned for this, forgot I had done that and had done it wrong.

    Should work well now - which is good as I see no way to get Multipath rules working without multiple interfaces not just the additional addresses.

    Cheers

    Simon

Reply
  • Thanks Douglas - simple idea, went back to my DNS records checking the spf record ready to add the other IP - ooops had it as part of a range - but had typed it wrong! So had planned for this, forgot I had done that and had done it wrong.

    Should work well now - which is good as I see no way to get Multipath rules working without multiple interfaces not just the additional addresses.

    Cheers

    Simon

Children
  • Good job on figuring out that it was an incorrect spf record - there's no anti-spam technique that compares the sender's MX record to the sending IP.

    FWIW, Doug's suggestion is the right way to send mail from a specific Additional Address.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA