[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] sendmail on DMZ
Title: RE: [FW1] sendmail on DMZ
Mike,
Though I agree that moving sendmail to DMZ is a good idea, but nothing prevents a hacker to reach your mailserver in DMZ. May be if you would want to run some SMTP proxy on firewall.
Naresh
-----Original Message-----
From: Mike Glassman - Admin [mailto:[email protected]]
Sent: Wednesday, September 12, 2001 11:37 PM
To: 'Rajesh'; [email protected]
Subject: RE: [FW1] sendmail on DMZ
Rajesh,
Firstly, the FW allways works better when there's nothing else on the box
excepting the FW, so your idea of moving your sendmail off it is a very good
idea, especially since sendmail if hacked (which some versions can be), can
allow someone to hack your FW as well...which is not good.
We have our relay in the DMZ (sendmail as well) and we have not had one
problem with the setup. Assigning the correct rules to allow flow of email
from the internet to your sendmail (preferably through a virus checker of
course) and then from the sendmail to your internal email server.
I can't see why it won't work.
Mike
> -----Original Message-----
> From: Rajesh [SMTP:[email protected]]
> Sent: ã ñôèîáø 12 2001 7:33
> To: [email protected]
> Subject: [FW1] sendmail on DMZ
>
>
>
> Hi,
>
> I have checkpint firewall ver 4.1 running on a solaris 2.6 box(E220R).
> At the moment I have a mail server too on the firewall (sendmail). I
> want to move the mail sever to DMZ. Are there any
> disadvantages/imapcts if I move the sendmail (mail server) to DMZ.
>
> I want to know whether it will improve the performance or not. Any
> suggestions would be really appreciated.
>
> Thanks,
> Rajesh.
>
>
>
> ====================================
> This email and any attachments to it are privileged and confidential.
> If you
> are not the intended recipient, please notify the sender and delete
> it. The
> contents of this email are not given or endorsed by the State Library
> of New
> South Wales unless otherwise indicated by an authorised officer of the
> Library. Copyright law may also apply to this contents of this email.
> ====================================
>
>
>
>
> ------------- End Forwarded Message -------------
>
>
> Unix System Administrator
> State Library of NSW
> Macquire Street
> Sydney - 2000
>
> Email: [email protected]
> Ph: 02-92731711
>
>
>
> ====================================
> This email and any attachments to it are privileged and confidential.
> If you
> are not the intended recipient, please notify the sender and delete
> it. The
> contents of this email are not given or endorsed by the State Library
> of New
> South Wales unless otherwise indicated by an authorised officer of the
> Library. Copyright law may also apply to this contents of this email.
> ====================================
>
>
>
>
>
> ==========================================================================
> ======
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
