RE: [FW1] Mailserver Behind Firewall

["Juppunov, George" <gjuppunov@FW1-NOSPAMbofasecurities.com>]

Russell,

I'm not sure I understand what you refer to as Mail Proxy, but I'm guessing
you are talking about a mail relay.
If you are referring to a mail relay on the DMZ, then that's what I meant as
well. I didn't think I had to go deeper
into this mail architecture, but sure. You want to have a mail relay or
relays that will hold the MX record(s) for 
your company, and you should probably have those on your DMZ. You want to
make sure your configuration is
built properly to block Spam etc, and that it relays properly based on your
rules. Most companies these days have 
an exchange server at the back end that will contain the user accounts,
although you can certainly relay to a
Unix box; depending on policy and configuration.

Cheers.
George 

 -----Original Message-----
From: 	Russell Aspinwall [mailto:russell.aspinwall@flomerics.co.uk] 
Sent:	Wednesday, August 01, 2001 2:14 AM
To:	Juppunov, George
Cc:	'Adeyemi Atanda'; fw-1-mailinglist@beethoven.us.checkpoint.com;
fw1-wizards@phoneboy.com
Subject:	Re: [FW1] Mailserver Behind Firewall

Hi,

Alternatively put a mail proxy server in to the DMZ, keeping your 
internal server on the private network and then content check all Email 
traffic between your private network and DMZ. Make sure your mail proxy 
is configured not to relay SPAM.
By using a Mail Proxy Server, it does not have to hold any internal 
Email account details.

Regards


Juppunov, George wrote:

> .... or you can put the mail server on your DMZ and give it one IP address
> that both external and internal hosts can access i.e. the normal way of
> doing this.
> 
> 


_____________________________________________________________________ 
IMPORTANT NOTICES: 
          This message is intended only for the addressee. Please notify the
sender by e-mail if you are not the intended recipient. If you are not the
intended recipient, you may not copy, disclose, or distribute this message
or its contents to any other person and any such actions may be unlawful.

         Banc of America Securities LLC("BAS") does not accept time
sensitive, action-oriented messages or transaction orders, including orders
to purchase or sell securities, via e-mail.

         BAS reserves the right to monitor and review the content of all
messages sent to or from this e-mail address. Messages sent to or from this
e-mail address may be stored on the BAS e-mail system.




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================