ISPConfig Internal Network

Discussion in 'ISPConfig 3 Priority Support' started by Dave King, Dec 12, 2024.

  1. Dave King

    Dave King Member HowtoForge Supporter

    Hi,
    I have configured nearly 20 mail servers on the same private network (VPS devices).
    As per previous posts I have email relaying from a server called God to relay servers. all is working fine.
    Some questions:
    1. At the moment the relay goes to the external IPs, I would rather route internally then close the ports off to the internet. Is this a case of changing the server IP to the private one in the config? Or can I add the private one with a comma after the public one?
    2. If I built a new server and immediately set "is mirror of server God", would I be able to have this so I just change some DNS records to point to to God2? I don't really want both in action, I just want one in reserve.
    3. Is there any way to backup the ISPConfig configuration? I have snapshot backups with the provider, but looking for something in case the provider goes pop.
    Thanks
    Dave
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    1) If the private network is configured in the network cards of the servers, so that one server can reach the other one on their private IP, and the server hostnames are configured on the private IP in the /etc/hosts files on all systems (configure all hostnames of the setup in each /etc/hosts file, then you can use the hostnames as relay target and all traffic will go trough your internal network.

    2) depends on what this master node is doing. If its the ISPConfig master (GUI, node ID = 1), then it will not work in the way that you can use the mirror as replacement for what the master is doing. If your master is running other services, then these other services will work on the mirror node, but you can not use ISPConfig GUI there. But the slave nodes do not need the master node to be online, so even if it fails, your other nodes will still work.

    3) You need at least a copy of /etc, a copy of /usr/local/ispconfig and the dbispconfig database to restore ISPConfig. For websites, you also need /var/www plus their databases and for mail you need /var/vmail. In case you do not want to loose logs, you need /var/log/ispconfig
     
  3. Dave King

    Dave King Member HowtoForge Supporter

    Thanks for the speedy reply.
    Ref point 1, that is what I did have, but the email wasn't working, said authentication error. As soon as I REM it out in the host file so it went public, it worked. So I guessed that the relay server didn't trust the private IP of God, or similar.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Maybe you did not enter the internal IP in postfix mynetworks setting of the relay server?
     
  5. Dave King

    Dave King Member HowtoForge Supporter

    Yes sorry that is what I am asking, I need to do that direct in Postfix? There is nowhere in ISPConfig? I didn't want to change it and cause a conflict.
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    The mynetworks setting is not managed by ISPConfig. You must have set it manually already if you were able to relay trough the external IP. if you authenticate with a user for relaying, then it does not need to be set though.
     
    Dave King likes this.
  7. Dave King

    Dave King Member HowtoForge Supporter

    I made a mailbox on the relay server and use that for auth, works with public IP but not with private though, auth issue.
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    If you use internal or external IP, it does not matter for SMTP auth. the IP is not considered or checked in this case. Check your network if internal IP is not working.
     
  9. Dave King

    Dave King Member HowtoForge Supporter

    OK so I found the issue here.
    Even if I add to mynetworks, the emails would fail. I found it was because if you have a blank username and password in the relay fields, it must be sending blank and blank instead of no auth?
    Really, we could do with a no auth tick box.
     

Share This Page