configure vip for mail server

[gquerenghi]

I have an exchange mail server and I mapped the dmz ip address to a public ip address mail server dmz ip: 10.10.10.10 vip: 20.20.20.20

edit " mail" set extip 20.20.20.20 set extintf " wan1" set mappedip 10.10.10.10

the 20.20.20.20 is a static ip I have from my isp this is the fw policy

config firewall policy edit 64 set srcintf " wan1" set dstintf " dmz" set srcaddr " all" set dstaddr " mail" set action accept set utm-status enable set schedule " always" set service " DNS" " HTTP" " HTTPS" " ICMP_ANY" " IMAP" " PING" " POP3" " SMTP" set av-profile " smtp-in" set spamfilter-profile " smtp-in" set profile-protocol-options " smtp-in" set logtraffic enable next end

my problem is that if I check the ip address of the server (from websites such as whatismyip) I get the wan1 ip and not 20.20.20.20 and I have problems with sending emails to companies that have rDNS checks (my isp has correctly configured the rdns for 20.20.20.20) is somwthing wrong in my configuration? thanks

[rwpatterson]

Check your institution' s DNS records. Maybe the server setting hasn' t propagated correctly? Are you sure the reverse records have been set up correctly?

[emnoc]

Note, having a mail-server exposed to the public on a DMZ and with a 2nd nic on the internet network, is asking for trouble if any thing is exposed or exploited.