Hi I think what you require also requires some IP forwarding:
- Setup the VPN so that you have a private network between the two machines - Arrange a simple ip port forward on the VPS machine back into the private mailserver My thoughts: - Consider moving the mail server to the VPS - Consider putting a forwarding server on the VPS, ie receives and queues mail for you, could pull that down to the private mailserver on demand. This solves you disappearing if the VPN goes down - You will need something to ping the VPN and ensure it's up and doesn't go down silently if your ip changes - SSH will make a basic VPN for your requirements, use the reverse port forwarding feature from the private machine to the VPS (it will go down on you silently, consider the implications) - Consider simply using a dynamic DNS service to follow your dynamic IP address (note you may have problems sending OUT from dynamic IP. Consider setting up a smart host on the VPS or using outsourced version of the same from the likes of dyndns) - Consider using some third party mail server such as the backup mx feature of dyndns. That way you just pickup mail on a schedule (pull)? Good luck Ed W On 28/04/2015 17:37, [email protected] wrote: > I currently have this network config > > Internet > | > modem > | > | static IP / 29 > HOMEOFC firewall/router > shorewall4 > shorewall6 > dns > | > ethernet switch > | > |- mail server, IP = 192.168.1.15 > > > I've got Shorewall doing the firewalling and the NAT'ing of the static > IP to & from my mail server, and so on. > > As a result of some local construction, I'm losing my current ISP and > the static IP / 29 soon, and will have to switch to a single dynamic IP. > > I still need the mail server, and for the mail server I'm still gonna > need a static IP. > > I've read online a bunch, and am thinking that tunneling through a VPN > to a VPS that has a static IP is the right direction. > > So this is what I think the network would need to look like. > > VPS firewall/router > openVPN ---------------| VPN endpoint, 10.1.1.1 > shorewall4 | > shorewall6 | > | static IP "1.2.3.4" | > | | > Internet | > | | > modem | > | | > | dynamic IP | > HOMEOFC firewall/router | > openVPN ---------------| VPN endpoint, 10.1.1.2 > shorewall4 > shorewall6 > dns > | > ethernet switch > | > |- mail server, IP = 192.168.1.15 > > > The goal is to make all traffic to & from the mail server appear to the > 'net like it's coming from and to the static IP at the VPS, '1.2.3.4'. > > I suppose I could also use an IPv6 tunnel somehow, but since the mail > server needs an IPv4 address, somewhere I'd have to mv traffic between > the IPv4 & IPv6 worlds. Not sure how. socat, I think -- but I don't > think it wins me antyhing. > > Anyway, that's all fine and good until I realize that I really don't > have a great handle on how to now setup both shorewalls to make it all > work. Adding the multiple networks, IPS and machines turns out to need > more shorewall expertise than I have so far. > > Is there a good documentation example of this ^^ scenario that anyone > can point to? > > Or maybe someone with a bit of time could kindly guide me through it > here? > > Thanks. > > aleph > > ------------------------------------------------- > > ONLY AT VFEmail! - Use our Metadata Mitigator to keep your email out of the > NSA's hands! > $24.95 ONETIME Lifetime accounts with Privacy Features! > 15GB disk! No bandwidth quotas! > Commercial and Bulk Mail Options! > > ------------------------------------------------------------------------------ > One dashboard for servers and applications across Physical-Virtual-Cloud > Widest out-of-the-box monitoring support with 50+ applications > Performance metrics, stats and reports that give you Actionable Insights > Deep dive visibility with transaction tracing using APM Insight. > http://ad.doubleclick.net/ddm/clk/290420510;117567292;y > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ One dashboard for servers and applications across Physical-Virtual-Cloud Widest out-of-the-box monitoring support with 50+ applications Performance metrics, stats and reports that give you Actionable Insights Deep dive visibility with transaction tracing using APM Insight. http://ad.doubleclick.net/ddm/clk/290420510;117567292;y _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
