If your mx records will point to the appliance, shouldn't your
internal mx/dns records just point to the appliance?

Tony Z



On Fri, Feb 18, 2011 at 1:55 PM, Chris Guest HIDDEN@@grady.k12.ga.us> wrote:
> We are changing out our email virus gateway appliance next week and I have a
> few questions.
>
>
>
> Our current appliance is setup in “bridge” mode so I did not have to make
> any kind of server or firewall configuration changes when it was put in.  My
> mail servers sit behind the gateway appliance on a small switch.
>
>
>
> The new appliance (Sophos ESxxxx) will actually relay messages to the mail
> server.
>
>
>
> From what I’ve sorted out so far, I will need to change my MX record to
> point to the gateway appliance.
>
> Allow ports 25 and 587 in through my firewall from outside to the gateway
> appliance and block them from outside to my mail server.
>
>
>
> When it comes to my Surgemail mail server I’m not quite sure what I need to
> configure.  Somehow I need to make it point to the gateway so that all
> messages that originate inside are also forced through the gateway for
> scanning.
>
>
>
> Any thoughts or recommendations out there???  What am I missing?
>
>
>
> ---
>
> Thanks,
>
> ChrisG