Rick,
Why not use Checkpoint's SMTP relay?
We use this talking directly to a Mail sweeper which in turn forwards to Exchange.
FW-->Sweeper-->Xchg
This means the outside world only ever talks to Checkpoint which does a reasonable job of checking for dodgy headers etc. It also blocks relaying and the like.
I'm also a little more prone to trust CP than a secured M$ box on the DMZ.
Luke Butcher
Em: [EMAIL PROTECTED]
> -----Original Message-----
> From: Rick Brown [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 31, 2002 8:57 PM
> To: [EMAIL PROTECTED]
> Subject: SMTP through firewall
>
>
> I wanted to get the opinion of the list regarding my
> email setup. I'm wondering what the pro's and con's
> are of allowing my mail server (Groupwise) access
> through my firewall to send mail vs. using a SMTP
> relay in the DMZ. We use FW1 on a Nokia and there are
> about 125 mail users. We don't host our own DNS
> (forward out to ISP). The DMZ SMTP server would be
> W2K running W2K SMTP service ('cause we already own
> it). We also run Trend Micro Viruswall and use CVP
> for the incoming mail. I'd appreciate any thoughts on
> the good/bad of this set up. We're short on staff and
> trying to keep things as simple as possible. Thanks.
>
> __________________________________________________
> Do You Yahoo!?
> Great stuff seeking new owners in Yahoo! Auctions!
> http://auctions.yahoo.com
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
>
E-mail Disclaimer
Nabarro Nathanson
Principal office:
Lacon House, Theobalds Road
London WC1X 8RW
Tel: +44 (0)20 7524 6000 Fax: +44(0)20 7524 6524
NOTICE:-
This message contains confidential (and potentially legally privileged) information solely for its intended recipients and others may not distribute, copy or use it. If you have received this communication in error please tell us either by return e-mail or at the numbers above and delete it, and any copies of it.
The contents of this e-mail are subject to the firms Terms of Business copies of which are available on our website.
We have taken steps to ensure that this message (and any attachments or hyperlinks contained within it) are free from computer viruses and the like. However, in accordance with good computing practice the recipient is responsible for ensuring that it is actually virus free before opening it.
Regulated by the Law Society. A list of partners is available at the address above or on our website, http://www.nabarro.com
