First time using EFA for outgoing, need some help
Posted: 23 Dec 2016 11:24
So if I am not inside my company and use Exchange OWA to send an email to another external address EFA applies scores to it:
This is me on my PC in France, sending via our internal Exchange server 192.168.200.3 which uses EFA as outgoing relay. 192.168.200.3 is on the whitelist on my EFA and yet it gets checked as EFA looks at my French IP !? Is that supposed to work this way? What if someone sends an email from their mobile device? I had hoped EFA would stop scanning the mails it receives from my Exchange server.
Any other hints and tips for outgoing emails? Up to right now I never used EFA for outgoing.
Also interested in your architecture; mine looks like this:
and I am also having trouble as EFA needs no use my internal DNS to resolve and successfully hand over the emails to the EX server. How do you guys handle this? As a workaround I can add a fixed entry into /etc/hosts and point to my internal IP for the EX.
How do you guys name your machines if they are in your DMZ? Do you use FQD or local domain names for EFA?
I tried using a FQDN and then adding my local efa.my.domain.tld I am using in my local network into /etc/hosts but I am very unsure if this is the right way to do things :-/
Code: Select all
192.168.200.3 (Reverse Lookup Failed) (GeoIP Lookup Failed) [ ] [ ] [ ] [ ]
fe80::a064:3331:2355:92eb (Reverse Lookup Failed) (GeoIP Lookup Failed) [ ] [ ] [ ] [ ]
51.254.xxx.83 charxxx.ict-consult.co.za FranceCode: Select all
Score Matching Rule Description
-0.57 AWL
0.00 HTML_MESSAGE
0.00 MIME_HTML_MOSTLY
-0.00 RCVD_IN_DNSWL_NONE
1.27 RDNS_NONE
0.00 TVD_SPACE_RATIOAlso interested in your architecture; mine looks like this:
Code: Select all
internet => firewall => EFA (in DMZ) => EXCHANGE (in internal network)How do you guys name your machines if they are in your DMZ? Do you use FQD or local domain names for EFA?
I tried using a FQDN and then adding my local efa.my.domain.tld I am using in my local network into /etc/hosts but I am very unsure if this is the right way to do things :-/