The firewall guy is a real piece of work then. If he calls himself a firewall afdmin (and gets paid for the job) I think it is a part of his job to actually configure the firewall in the way that would be most appropriate for the business needs.
-----Original Message----- From: Bridges, Samantha [mailto:[EMAIL PROTECTED] Sent: Thursday, February 12, 2004 10:15 AM To: Exchange Discussions Subject: RE: Inbound/Outbound Mail Question Andrey...you don't miss a thing, do ya? Thanks for your patience....:) I am still trying to get this clear in my head. I do have Outlook clients and needed to find another way to block connection to the Xchg server. I am going to do the firewall route but I just wanted to understand details of it. I have a guy here who does all the firewall configurations and doesn't like to share info...if you know what I mean. He acted like this needed to be done from Exchange and didn't want to configure the PIX...no biggie...with all of your help I have asked the right questions in a nice way and will now get this setup on the firewall. I don't know/understand the firewall real well and don't get much chance to work with it.....rules and all. Thanks for taking time to help, it is really appreciated. -----Original Message----- From: Fyodorov, Andrey FTL [mailto:[EMAIL PROTECTED] Sent: Thursday, February 12, 2004 9:48 AM To: Exchange Discussions Subject: RE: Inbound/Outbound Mail Question I thought we already talked about this. :) Anyway go ahead an restrict the SMTP Virtual server on your Exchange 2000 box to only accept connections from the Imail server. This will not affect its ability to send mail in any way. However if you have any users that use Outlook Express (or Outlook as a POP3/SMTP client), and they currently connect to the Exchange server to send mail, they will not be able to do so anymore. Unless you allow their IP addresses to connect as well. If they just use Outlook with MAPI or OWA, you don't need to do anything special. Another way would be to figure out why your firewall allows everyone to connect to your Exchange server's SMTP port. You should be able to define a rule on the firewall that would block everyone's inbound connections to the Exchange server on port 25 and only allow the Imail server to do that. -----Original Message----- From: Samantha Bridges [mailto:[EMAIL PROTECTED] Sent: Thursday, February 12, 2004 9:30 AM To: Exchange Discussions Subject: Inbound/Outbound Mail Question I have an Imail server on the outside of my firewall (PIX) and an Exchange 2000 server on the inside. I use an Imail server as a gateway virus/spam scanner. All mail comes through my Imail server where it is scanned for viruses and spam. From the Imail server, all mail is forwarded to mailboxes on Exchange. It works really good except that I am still receiving messages directly to the Exchange server mailbox, bypassing Imail. Basically, I want to only accept mail that comes from the Imail server. Should this be forced from the firewall or from Exchange? If I set inbound connections to only come from Imail what does that do to outgoing mail? What do I need to do to insure outbound delivery from Exchange...not out through Imail. In through Imail...through firewall.....to Exchange....Out through Firwall??? _________________________________________________________________ Get some great ideas here for your sweetheart on Valentine's Day - and beyond. http://special.msn.com/network/celebrateromance.armx _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. --- [This E-mail scanned for viruses by Declude Virus] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
