At Tuesday, May 16, 2006 12:02 PM, Bryan S. Sampsel wrote: > One thing you can do is put a mail relay, whether it's Qmail or > Postfix, on BSD or Linux, and stick that in your DMZ. Then, only > open the SMTP port into and out of your DMZ (lock down the rest) for > traffic to pass to your internal mail server. That opens up a much > smaller hole for your internal systems.
Remember, though, that the FE/BE architecture isn't the same thing as a bridgehead server. An FE server doesn't have to be an SMTP bridgehead, so putting something like Postfix out in the DMZ may solve some aspects of the problem, but doesn't address the client access issue. -- Devin L. Ganger Email: [EMAIL PROTECTED] 3Sharp LLC Phone: 425.882.1032 x 109 15311 NE 90th Street Cell: 425.239.2575 Redmond, WA 98052 Fax: 425.702.8455 (e)Mail Insecurity: http://blogs.3sharp.com/blog/deving/ --------------------------------------------------------------------------- ---------------------------------------------------------------------------
