Mail server (ispconfig) ... with relay host (frontend, Porxmox mail gateway) : possible ?

Hello,
i'm going to install complete webhoster with ispconfig.
Few questions :

1. Can i leave all my server with an internal FQDN, serverX.webhoster.local ? (mail server included ?)
   (for dns, databse, web, webmaster - panel - it seems to be ok ... but for ISPConfig mail server ... hummm)
   
2. Do you see any issue with HAproxy as frontend, loadblancer to ISPconfig stuff ?
3. Do you see any issue with Promox Mail Gateway (smtp 25-26 filtering solution) as frontend : relay host infact ! ?

Thank you?

I friendly share our , infra. schema design. (IP adress will be changed)
For those who want to build their own ... ;-)

 

This is more on a load balancing setup rather than ISPConfig, so have you tried searching or asking assistance in the relevant forum(s) instead?

In my view, any machine(s) / device(s) that are doing load balancing should work fine infront of ISPConfig server(s) provided you know how to set it up properly.

If you search howtoforge tutorials you may find few of the setups shared, however, its setup has nothing to do with ISPConfig.

 

the question is about let's encrypt stuff in ispconfig ... for haproxy.
i will use req.sni in order to route http request to the correct web server.

 

I can't find anything related to Let's Encrypt in the opening post of this thread or its title.

Regarding proxy, there is a thread sharing a working Let's Encrypt using nginx as reverse proxy, which I think is related, so do dig the forum.

Again, such setup has nothing to do with ISPConfig.

 

attacks, and monitoring are against relay, in dmz , ispconfig frontend mail server are safe .... just
for that :

 

and finally :

 

ispconfig seems to have no way to manage via webgui quarantine, postscreen etc like pmg, but perahps i'm wrong ?

 

ispconfig seems to be a very good mail backend (submission, imap, pop) , but i planned to put hardenned frontend : proxmox mail gateway for smtp (25) trafic.
perhaps this is not recommended.
?

 

ok till.
thank you for your precious advices.
but : i lost all our web gui for mailing stats, managing, quarantine ...
how'can i monitor mail activity with ispconfig ?
that's sad.

 

ok.
is it hard to use/install rspamd after mail server installation (i follow step by step th ispconfig manual) or must i reinstall mail server ?
ours servers database, and data are empty now.

 

thank you till, i just discover it !

note: i'm surprised to see that we must install dns service on mailserver ... (unbound)
edit : rspamd, seem to be well integrated to ispconfig, just one world ... COOL.
... and the web gui powerfull.
all those things sounds good.

 

another question : is there a problem if i call mail servers ...
mail1.domain.local and second mail2.domain.local ?
mx names in dns are mail1.domain.com and mail2.domain.com (those are the exposed internet name)

 

hum, that sound not good for me. all my ispconfig server 3 web server, 3 database server, 2 dns server , 1 panel server are all setup with domain.local : the two mail servers includes.
our real domain name e.g. domain.com, is already in use for our actual web hosting system. And this why i decided to use a "local" domain fqdn.
in order to migrate ...
and i was except ispconfig mail server can hide their real name here (mail1.domain.local, or mail2.domain.local) with client domain one ... that's what we are doing with are mail infrastructure in use.
what are you suggest us ?