[FW-1] mail server in DMZ

[MARIO MORENO <mario@FW1-NOSPAMCAMACOBU.ORG.CO>]

Hello fw-1 gurus

 

We are enabled a mail server in our DMZ (It is secure?), but we have some problem reading and sending mail from de internal network?

 

I have enabled some rules to let the mail server in DMZ:

 

Source            Destination             Service             Action

 

RED_DMZ        Any                    smtp pop3            accept

 

Any                RED_DMZ            smtp pop3            accept

 

My questions:

 

1. It is good thing to let a mail server in our DMZ?

2. What other rules I need to let the mail server funcion ok in the DMZ?

 

Thanks a lot for your help.

 

Mario Moreno Cuervo
Bucaramanga - Colombia