NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] RBL List?



There are no "open ports" on my firewall. The person who sends our
organization e-mail never even sends it to my firewall's address.
They're sending to a mail server's address. The SMTP is pulled off,
intercepted by the firewall and redirected. How is that different from
going through the firewall directly a mail server? Answer, it's not.
Fact is, no one can even "see" my firewall, let alone send it a packet
directly. No open ports, nada.
With FW-1, I can pull off SMTP and send it to any one of a number of
spam servers, and sometimes mail servers, depending on which of the 156
mail servers it is destined to go to. It works very well, and does not
present any security hazards...
You must be thinking of some kind of PAT configuration...



-----Original Message-----
From: Don [mailto:[email protected]]
Sent: Friday, May 17, 2002 2:01 PM
To: [email protected]
Subject: Re: [FW-1] RBL List?

> I use the smtp security server on five checkpoint firewalls, in a
LARGE
> scale environ--I have never seen the headers stripped, i.e. each and
> every smtp "hop" is shown, along with their IP's. I track mail on a
> daily basis, and the info is there. Tracking mail is just what it
should
> be, and headers are no different than any other mail server I have
dealt
> with...
Well as I said, i have no idea what its behavior is because I do not use
it.

In a large environment, why are you using the SMTP security server?

I have asked this question on this list a number of times and noone has
ever given me a good reason for running any of CheckPoints security
servers. Giving someone an open port to my firewall with a daemon that
is
actually listening just strikes me as ludicrous.

-Don

> What he means is that CheckPoint removes the headers on the email put
> their by the mail server such as what server handled the mail and
when.
> This make troubleshooting a nightmare.
>
> I did not know the SMTP security server did this, but if it does, it
is
> another reason not to use it.
>
> -Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.