*Assistance setting up an Exchange 2019 Server's DNS records as, this is my first Exchange Server deployment
The server is a Windows 2019 Standard system and is a member of a domain.
Exchange 2019 CU5 was successfully installed and so, the proper Send Connector, Accepted Domain and Recipients have been added and this server is an on-premise Exchange Server.
The Exchange server can send and receive in and out bound mail with the exception of out bound mail be received as spam hence, the big question(s) re: DNS coming up...
This is the server information:
Exchange Server Static WAN IP 123.456.789.321
Exchange Server Static LAN IP: 10.0.0.1
Exchange Server (computer name): mailserver
Exchange Server e-mail domain: mydomain.com
Here is where I am seeking advice...
1. Exactly what for DNS would I enter on the Exchange server if necessary? Please be specific and detailed based on the Exchange settings I provided.
2. Exactly what DNS settings should I insert regarding DNS settings on the registrar? Please be specific and detailed based on the Exchange settings I provided.
3. Exactly what DNS information should I provide the ISP that provided the static WAN IP? Please be specific and detailed based on the Exchange settings I provided.
Your assistance with the DNS settings is greatly appreciated.
1) You would never multi-home exchange - you're just creating pain for yourself there
2) Best practice is to utilise the same DNS that is configured within your domain.... i.e. your domain controllers will take care of local DNS and have forwarders configured to resolve public addresses... that way you get consistency across your entire environment
3) you would reverse publish your exchange server on ports 25 and 443 from your router and/or reverse publishing device (such as an F5)
4) external DNS will require a name for client access services (commonly webmail.domain.com), mail delivery (e.g. mail.domain.com) and a mail exchanger (MX) record - that would point to the A record mail.domain.com. This is vital, as it allows mail delivery, but also DNS reverse lookups to occur, which is one common anti-spam mechanism. You may also wish to setup SPF or DKIM records... but thats going a bit too deep for now i think.
5) I dont understand question 3.... you havent told us where your WAN IP is coming into.... exchange (bad idea), router? router with a reverse publishing device behind it? whats your external segment network topology ?