Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Ironport setup

Need a few pointers with ESA setup

Incoming Mail

Internet --> Messagelabs ---> ESA ---> Exchange

Exchange --> ESA --> Messagelabs --> Internet

 

Basically my email is routed through Messagelabs and we want to add a layer of security with ESA.  Eventually if it performs well, we will remove Messagelabs.  

 

I know to route mail to exchange, I have to use SMTP routes with the domains.  
I need to do this for incoming and outgoing mail.

Also, for a few boxes, I need to know how to bypass messagelabs.  I need the functionality of a Postfix box and just send out to the Internet while performing lookups with MX records.

Is there a way to do this for certain domains as well?

 

 

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

By default you will configure

By default you will configure a "default smtp route" that would send everything back to MessageLabs in your above design. For those domains that you want to go directly simply create an SMTP route and instead of specifying the IP address of the destination use the USEDNS entry for the route. This will tell the ESA to lookup the MX record and not follow the default SMTP route.

 

 

5 REPLIES
Cisco Employee

By default you will configure

By default you will configure a "default smtp route" that would send everything back to MessageLabs in your above design. For those domains that you want to go directly simply create an SMTP route and instead of specifying the IP address of the destination use the USEDNS entry for the route. This will tell the ESA to lookup the MX record and not follow the default SMTP route.

 

 

Community Member

Tommy,thanks for the reply.So

Tommy,


thanks for the reply.


So under SMTP routes, I would add in for example

receiving domain exchangedomain.com, then destination would be messagelabs server

For the the domains that are not using messagelabs

receiving domain: nomessageble.com then destination would be USEDNS

Cisco Employee

I would configure the default

I would configure the default SMTP route to point to MessageLabs and then specify (override) the default by adding in the other domains

 

exchangdomain(s).com ---> Exchange Server

trustedpartner ----> USEDNS

default ------> Messagelabs

Just make sure you list all your internal domains going to the Exchange server so they get rerouted out to MessageLabs and create a loop.

Community Member

Thanks.  I will test and

Thanks.  I will test and write back.

 

 

Community Member

Tommy, I added in the default

Tommy,

 

I added in the default route to message labs and it sends out and receives fine.

 

I tested something out and I'm not 100 percent sure about the behavior

I added a smtp route for a specific domain and it send out properly but not by Messagelabs


I removed the entry for the specific domain and it sent out properly but not by message labs

 

Both behaviors is what I want, but is this behavior the way Ironport is suppose to act?

418
Views
0
Helpful
5
Replies
CreatePlease to create content