Exchange cu ipuri private

Salut. Am urmatoare configuratie:

-1. LAN cu ipuri private clasa c 192.168.0.x
-2. Un router Fortigate foarte destept ;). Pe el am doua conexiuni WAN ( WAN1 si WAN2 )
-3. Serverul 2003 este active directory si am instalat si pe el exchange 2003. Serverul are ip privat 192.168.0.1 , el deserveste reteaua interna ceva servicii interne bazate pe web, file server. Acest server se ocupa de domeniul subdomeniu1.domeniu1.ro userii se autentifica din intern pe subdomeniu1.domeniu1.ro. domeniul1.ro se afla pe un alt server. Din serverul master am delegat subdomeniul1 catre ip de pe router WAN2.
Pe router am facut port forwarding WAN2 LAN pt dns ( 53 udp ), 25 si 110.
Iata cum raspunde la dns-ul

 dig suport.netsafesolutions.ro

; <<>> DiG 9.2.3 <<>> suport.netsafesolutions.ro
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52186
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;suport.netsafesolutions.ro.	IN	  A

;; ANSWER SECTION:
suport.netsafesolutions.ro. 60  IN	  A	   82.76.77.136

;; AUTHORITY SECTION:
netsafesolutions.ro.	60	  IN	  NS	  ns.itcnet.ro.
netsafesolutions.ro.	60	  IN	  NS	  ns2.itcnet.ro.

;; Query time: 22 msec
;; SERVER: 194.102.255.2#53(194.102.255.2)
;; WHEN: Tue May 29 17:13:23 2007
;; MSG SIZE  rcvd: 102

:~# ping suport.netsafesolutions.ro
PING suport.netsafesolutions.ro (82.76.77.136) 56(84) bytes of data.
64 bytes from planetek4.itcnet.ro (82.76.77.136): icmp_seq=1 ttl=249 time=7.79 ms
64 bytes from planetek4.itcnet.ro (82.76.77.136): icmp_seq=2 ttl=249 time=8.30 ms
64 bytes from planetek4.itcnet.ro (82.76.77.136): icmp_seq=3 ttl=249 time=7.64 ms
64 bytes from planetek4.itcnet.ro (82.76.77.136): icmp_seq=4 ttl=249 time=8.37 ms

--- suport.netsafesolutions.ro ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3029ms
rtt min/avg/max/mdev = 7.648/8.033/8.379/0.316 ms

Deci merge pingul

Pot sa trimit mailuri prin exchange, am trimis pe yahoo, dar cand ii dau repaly , eroare :
Hi. This is the qmail-send program at yahoo.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[email protected]>:
Sorry, I wasn't able to establish an SMTP connection. (#4.4.1)
I'm not going to try again; this message has been in the queue too long.

--- Below this line is a copy of the message.

Return-Path: <[email protected]>
Received: (qmail 82586 invoked by uid 60001); 25 May 2007 13:05:44 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID;
  b=LfDPFIGPWQBymmC++nt3ifu9ORkP4RsPuyKy/PTYqrOWdwI3Sw4ufTrA0NGCSvJAe9gJbJzHC91Q3Vo5BxoWJb6UyPbDiA5eK9AWEF//TE2qHadAanIulEsi1xS1pTXAtQSWMKqInEYm5hNbGWQLn8L3Cr13GUhcz9BT+vKbOdY=;
X-YMail-OSG: d6F9CV4VM1nDWgE7lPBGgR8NJujWdOgjqpu6v3AzjJLHLwXl9mZNiIp14rJCgPuPjaAerdsbpNHwkCJreLCDRNdDLHn_D6bPM4cGEWK1vSyoQU4uyuk7
Received: from [82.76.77.136] by web60311.mail.yahoo.com via HTTP; Fri, 25 May 2007 06:05:44 PDT
X-Mailer: YahooMailRC/651.23.1 YahooMailWebService/0.7.41.14
Date: Fri, 25 May 2007 06:05:44 -0700 (PDT)
From: cristian ceobanu <[email protected]>
Subject: Re: test
To: Cristian Ceobanu <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-208739004-1180098344=:81660"
Message-ID: <[email protected]>

--0-208739004-1180098344=:81660
Content-Type: text/plain; charset=ascii

test de pe yahoo

   ceoby  

----- Original Message ----
From: Cristian Ceobanu <[email protected]>
To: [email protected]
Cc: Cristian Ceobanu <[email protected]>; Cristian Ceobanu <[email protected]>
Sent: Friday, May 25, 2007 4:01:43 PM
Subject: test

Getting MX record for suport.netsafesolutions.ro (from local DNS server, may be cached)...   There is no MX record for suport.netsafesolutions.ro!  That's bad.
Checking for an A record... Got it!

Host Preference IP(s) [Country]
suport.netsafesolutions.ro 0 82.76.77.136 [RO]




Step 1:  Try connecting to the following mailserver:
         suport.netsafesolutions.ro - 82.76.77.136

Step 2:  If still unsuccessful, queue the E-mail for later delivery.



Trying to connect to all mailservers:

   suport.netsafesolutions.ro - 82.76.77.136  [Could not connect: Could not receive data: Operation timed out.]
  [Note that if your mailserver takes over 30 seconds to respond, our test will timeout, even though real mailservers will wait longer]



NOTE: This tool does NOT attempt to determine if an E-mail address exists!

1. daca serverul e cu IP privat, cum vrei sa se conecteze yahoo la el sa trimita mailul. iti si zice acolo yahoo de ce nu poate: Sorry, I wasn't able to establish an SMTP connection. (#4.4.1)
2. nu ai definit MX record in DNS.

worm, on May 29 2007, 18:46, said:

ping suport.netsafesolutions.ro merge. Am facut ip forward catre server ce vine pe acest ip.
Iar mx l-am declarat in dns pe 2003

Cred ca problema este faptul ca serverul meu dns de pe 2003 nu rezolva cererile pt subdomniul pe care este master. Si revin, nu e suficient sa fac forward de pot pe 53 udp ?

ai delegat subdomeniul? pe bind asa se face: http://www.zytrax.co...9/delegate.html

banuiesc ca asta trebuie sa faci la icnet.ro, unde vad ca ai domeniul.

Aia de la itcnet sunt super varza, mi-au facut numai gafe, acum am pus un alt subdomeniu, domeniul parinte este gazduit la mine pe un linux, deci am libertate totala.
Reiau un pic
domeniu ccitcomputer.ro
subdomeniu net.ccitcomputer.ro

am delgat subdomniul, merg, dar aceeasi problema

~# dig www.net.ccitcomputer.ro

; <<>> DiG 9.2.3 <<>> www.net.ccitcomputer.ro
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19412
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.net.ccitcomputer.ro.       IN      A

;; ANSWER SECTION:
www.net.ccitcomputer.ro. 3600   IN      CNAME   server.net.ccitcomputer.ro.
server.net.ccitcomputer.ro. 3600 IN     A       192.168.0.1

;; AUTHORITY SECTION:
net.ccitcomputer.ro.    84145   IN      NS      server.net.ccitcomputer.ro.

;; Query time: 44 msec
;; SERVER: 194.102.255.3#53(194.102.255.3)
;; WHEN: Tue Jun  5 12:04:45 2007
;; MSG SIZE  rcvd: 92

Cum configurez eu ca la acelasi server exchange sa fie si public dar cu ip-uri private, bagat adnc in DMZ :)