Please help or advice

[NKOADMIN]

my status as below

ISP firber hub <--> (50.x.x.1/32) pfsense (203.x.x.1/27) <--> (203.x.x.16/27) firewall <--> DMZ/LAN

it is working fine only when I try to setup the SPF1, I found it show the psfsense(58.x.x,1) IP instead mail server (203.x.x.17)

in public DNS a TXT record for mail server set as below

mail IN TXT "v=spf1 mx ip4:203.x.x.17 ~all"

I tested by mxtoolsbox and show as below

SPF Failed for IP - 58.x.x.1

public DNS server hv the A record, TXT record for mail server point to 203.x.x.17,
it should reply 203.x.x.17 instead 58.x.x.1, am I right?

I think there is something setup wrong in pfsense right?

can anyone help? or give me hints to resolve

Many thanks

Paul

[NollipfSense]

@NKOADMIN said in Please help or advice:

I think there is something setup wrong in pfsense right?

Sounds more like a misconfiguration...you could take a look at this: https://www.netgate.com/resources/videos/creating-a-dmz-on-pfsense.html

[NKOADMIN]

@NollipfSense said in Please help or advice:

@NKOADMIN said in Please help or advice:

I think there is something setup wrong in pfsense right?

Sounds more like a misconfiguration...you could take a look at this: https://www.netgate.com/resources/videos/creating-a-dmz-on-pfsense.html

Dear NollipfSense,

Thank you for your reply, I do have DMZ and LAN after our firewall, but pfsense I used as the router at the moment, since we still got agreement with a firewall company.

below is our current status

internet <--> (58.x.x.1/32 WAN) Pfsense (203.x.x.1/27 LAN) <--> (203.x.x.2/27)firewall (203.x.x.x/27)<--> DMZ/LAN (192.x.x.x/24)

what I need now is pfsense to reply the 203.x.x.x/27 IPs to the world, when the world queries our servers.

eg. the SPF queries.

[NKOADMIN]

@NKOADMIN I found the solution by setting the Routing Public IP Addresses to resolve my issue.

[NollipfSense]

@NKOADMIN Awesome...congrats!