Hi there,

We have a single Domino server with hostname mail1.acme.com.

We have 2 separate lines from 2 different ISPs that are connected to mail1.acme.com. i.e. 2 public IPs that are NAT to the internal IP of mail1.acme.com

I wanted to do something like this:

Type	Preference	Hostname	IP
MX	10	mail1.acme.com	public IP from ISP1
MX	20	mail1.acme.com	public IP from ISP2

Create 2 MX records with the same host name.

Then create 2 A records that map the host name to the 2 different public IPs

But the person who manages our DNS (on cloudflare) told me that it is not possible to create 2 A records with the same hostname but different public IPs.

So, it was decided that the secondary MX would have hostname mail2.acme.com and its A record will have the second ISP's public IP.

Mail flow works, with both the primary and secondary.

However, when we use the secondary, we have an SSL error because the hostname in the MX record does not match the hostname in the SSL certificate.

Is there any way around this?

Have any of you had the same issue and how did you set up your system?