Transparent Mode Deployment; Configuring Dns Records; Configuring Dns Records For The Fortimail Unit Itself - Fortinet FortiMail-100 Install Manual

Transparent mode deployment

Transparent mode deployment

Configuring DNS records

Configuring DNS records for the FortiMail unit itself

FortiMail™ Secure Messaging Platform Version 4.0 Patch 1 Install Guide
Revision 2
http://docs.fortinet.com/ • Feedback
After completing the Quick Start Wizard, you may be required to configure some items that
are specific to your network topology or the operation mode of your FortiMail unit.
This chapter contains examples of how to deploy a FortiMail unit that is operating in
transparent mode.
This chapter includes the following:
• Configuring DNS records
• Example 1: FortiMail unit in front of an email server
• Example 2: FortiMail unit in front of an email hub
• Example 3: FortiMail unit for an ISP or carrier
If the FortiMail unit is operating in transparent mode, in most cases, configuring DNS
records for protected domain names is not required. Proper DNS records for your
protected domain names are usually already in place. However, you usually must
configure public DNS records for the FortiMail unit itself.
For performance reasons, and to support some configuration options, you may also want
to provide a private DNS server for use exclusively by the FortiMail unit.
This section includes the following:
• Configuring DNS records for the FortiMail unit itself
• Configuring a private DNS server
In addition to that of protected domains, the FortiMail unit must be able to receive web
connections, and send and receive email, for its own domain name. Dependent features
include:
• delivery status notification (DSN) email
• spam reports
• email users' access to their per-recipient quarantines
• FortiMail administrators' access to the web-based manager by domain name
• alert email
• report generation notification email
For this reason, you should also configure public DNS records for the FortiMail unit itself.
Appropriate records vary by whether or not Web Release Host Name/IP (located in
AntiSpam > Quarantine > Spam Report in the advanced mode of the web-based
manager) is configured:
• Case 1: Web Release Host Name/IP is empty/default
• Case 2: Web Release Host Name/IP is configured
Configuring DNS records
119