Hi All, This may be a basic question but I want to ensure I understand the implications before I configure the SMTP security server.
To prevent direct mail into and out of our network, I want to provide an external SMTP server to relay mail into and out of my internal domain. Also I want to provide for some basic SMTP filtering (i.e. embedded scripts). As I understand it, the SMTP Security Server provides this. The basic steps to implement this in a Nokia FW-1 NG FP3 box, as I understand them, is as follows: 1) Direct the public MX record for the domain to be an external IP that the Nokia has an ARP entry for. 2) Configure an SMTP resource with the INTERNAL IP address of the mail server and other filtering settings. 3) Create a rule to direct SMTP traffic bound for the external interface to use "SMTP with Resource", which is the resource created above. 4) Create a rule to allow the internal mail server to allow SMTP to the internal firewall interface(before the "stealth" rule). 5) Modify the internal mail server to use the internal firewall interface as the mail relay, instead of using DNS/MX lookup. I believe that is basically it. I just have a few questions to clarify some settings: 1) In the SMTP configuration of the Firewall object, there is a spool directory and Postmaster name. What should these be set to? Is "/var/fwspool" and Postmaster correct? Do I need to create the directory on the Nokia and a postmaster mailbox internally? 2) Regarding the SMTP Resource configuration, using DNS/MX is required as I will configure my internal mail server to use the firewall as the outbound SMTP server, correct? 3) How does the "Check Rule Base with New Destination" work? Is it a last check to determine if there have been any smtp blocks via the rulebase before sending out to a specific domain? 4) What about the "Error Mail Delivery" option, what is it's function? I have done some reading but nothing exactly answering the above. Thanks for your help. Regards, Chris ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
