Proxy | MTA-IN | MTA-OUT

[Hazem]

Dear all,

I'd like to understand some points as well as explanation for MTA-IN and MTA-OUT
-First of all i'm running Release 5.0.18_GA_3011.RHEL5_20090707151729 RHEL5 NETWORK edition

1. - installed DNS Bind on Standalone server
2. - LDAP and SNMP on server
3. - Mailstore with apache and archiving on Server
4. -Porxy and SNMP on server
5. -MTA and SNMP on server "it should act as MTA for only incoming mails"
6. -MTA and SNMP on server "it should act as MTA for Outgoing mails"

I have configured correctly the Mailstore and Proxy and they working smoothly fine
i can browse the mails using Proxy IP and Mailstore direct for Administration console

Now my questions are:

• - in order that i'm using Zimbra-Proxy i'll need to enable "This server is a reverse proxy lookup target" in MTA-IN and MTA-OUT?
  
• -How i can customize MTA-IN to do only the functionality of incoming mail server ? & How i can customize MTA-OUT to do the functionality of outgoing mail server only?

P.S: even if i'm sending internal Mails

in the meantime the status is ..while i'm sending mail between internal accounts and MTA-IN is down.mails sent successfully which means MTA-OUT doing both functions

Also Question related to Certificates: Deployment of Certificates per Server or Domain? and it can be only one for all servers?



Thanks in advance.
Best Regards
Hazem

[uxbod]

Welcome to the forums

Why do you want the servers to only perform MTA IN or MTA OUT ? Do you have other servers that provide secondary MX or relay ?

[Hazem]

Because planned to do this task in large business environment with NLB, LA, Clustering
and it will provide e-mailing services for many domains.

P.S: I'm still in phase ONE , its a test environment

i tried to search about zimbra-mta in and out but unfortunately i found nothing.

appreciate your reply thx

[Hazem]

Any news?


I've changed in Global Settings of 1st Mailstore "Web mail MTA Hostname: to be the MTA-OUT IP"
and in Domain Settings changed Inbound SMTP host name: to MTA-IN

But now i'm wondering what i did is right or wrong?
also i need to know how the incoming mails will understand that it should go to MTA-IN ?

i think it would be something related to DNS
anyways this is the output of dig domain name

just in case if anyone can advise


dig mx hazem.com

; <<>> DiG 9.3.4-P1 <<>> mx hazem.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5327
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 3

;; QUESTION SECTION:
;hazem.com. IN MX

;; ANSWER SECTION:
hazem.com. 38400 IN MX 10 hsmtain1.z1.sp.hazem.com.
hazem.com. 38400 IN MX 10 hsmtaout1.z1.sp.hazem.com.

;; AUTHORITY SECTION:
hazem.com. 38400 IN NS dns.z1.sp.hazem.com.

;; ADDITIONAL SECTION:
hsmtain1.z1.sp.hazem.com. 38400 IN A 192.168.4.202
hsmtaout1.z1.sp.hazem.com. 38400 IN A 192.168.4.203
dns.z1.sp.hazem.com. 38400 IN A 192.168.4.100


Thanks in advance