Hello list, so what I'm basically interested in: Where (seen from a network point of view) do you guys place your content filters?
It's not very hard to see that the frontend MXs in one's company should be realized as a screened host, i.e. in a subnet separated from the Internet and from the company's internal network. If the frontend MX need data stored in databases (SQL, LDAP), it's advised most of the time to dump those databases on a regular basis and copy the files to the frontend MX. Now, things aren't that easy with amavisd-new: While you _can_ dump all the data carefully updated in your SQL/LDAP configuration, this is - in most cases - a lot of work. So, the choices you have are (at least IMHO): 1. Place the content filter in the company's internal network, where it has access to the database backends. 2. Place the content filter in the same (or another screened) subnet which already hosts the frontend MX. Place the database server in the companys internal network, allow queries. 3. Place content filter and database backend in the same (or another) screened subnet that already hosts the frontend MX (worst solution, IMHO). 4. Place content filter and a special read-only slave of the database in a screened subnet outside of the company's internal network, update database mirror from inside the companys's network. How do you guys handle that (that is, if you have at least one screened subnet)? Cheers Stefan -- Stefan Förster http://www.incertum.net/ Public Key: 0xBBE2A9E9 FdI #81: Cursor-Tasten - Neumodischer Schnickschnack. (Gert Döring) ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
