Routing from mark_routing to internal IP

NETWORK:

A router with two interfaces one internal(192.168.1.1/24) another public(10.1.2.1/26). a mail server in DMZ with 10.1.2.2/26.

Masquerade is setup for 192.168.1.0/24 to public interface.

PROBLEM:

My MRTG graphics on public interface are showed incorectly. Incorectly because when users from my internal network send or receive mail from my mail server (10.1.2.2/26)they get a higher speed that the real internet speed for my internet connection that is 512kbps, because mail server is in DMZ and router connects though swith to him and gets 100mbps connection. I still want that the connection between my network and mail server was at this high speed, but I dont want that this kind of high speed mail transfers dereglate my graphics from public interface. I want that on that graphics get drawed only real speed up to 512kbps upload and download, and not the traffic with my DMZ.

PARTIAL SOLUTION:

I put a second ethernet interface on mail server and setup 192.168.1.2/24 IP, and connected this interface to internal switch. Now the mail server is on internal network and he is available to serve users(192.168.1.0/24) that will reconfigure their mail clients software from 10.1.2.2 to 192.168.1.2.

PROBLEM: I dont want to reconfigure to all 200 users their mail client software.

QUESTION: How I can find the way out from this problem?

P.S. I have tried to mark connections to mail server with mark_routing and then route them to internal ip, but it doesnt work… i thinks that is not corect what I’m trying to do… if someone know how to do this, pls describe…

When you would use DNS server in your network it would be simple to change real mail server IP without need to reconfigure mail client software.

yep, its a good solution, and I know about this. but anyway I must setup an internal forward only DNS SERVER, and reconfigure all my users to use him. And this are 200 pc’s :frowning:… or maybe I can do only dns server, and then redirect all clients dns querys to him?

I have solved I think my problem by redirecting DNS udp queries to my local dns server, and then put my static entrys here. I think this way it will work better, and my problem is solved, its the best that I could do…

thx for the ideea with DNS server… I forgot about him :slight_smile:


P.S. for sure my company will by a few level 3 mikrotik licences :slight_smile: big thanks to MT team, for develompent such a good software for us! wish you a lot of healt!

Hi V00D00

I use the DNS cache built into the MikroTik router, one less computer needed and I put my static entries into that, just as you have done.

Works really well :smiley: