We block mail relaying at our SMTP gateway. So does having fw-1 check the
destination domain have any value-added features? Is it another layer of
defence, or a waste of fw-1 resources?



-----Original Message-----
From:   Joerg Fritsch [mailto:[EMAIL PROTECTED]]
Sent:   January 31, 2003 6:13 AM
To:     [EMAIL PROTECTED]
Subject:        [FW-1] AW: [FW-1] SMTP Rule - 4.1 and NG FP3

Hello,

of course you can configure your Check Point FireWall as MTA. DNS does not
handle this issues (SPAM), professional MTAs like MIMESweeper, sendmail or
qMail behind your firewall do. I.e. in sendmail you just have to enter
"OURDOMAIN" into the acces.db.

I personally prefer having a single point (the mailserver oder relay) doing
all the SMTP-related actions. This makes troubleshooting a lot easier and
saves your firewall rescources.

--Joerg
http://www.firewalls-illustriert.de


-----Ursprüngliche Nachricht-----
Von: Christopher Collins [mailto:[EMAIL PROTECTED]]
Gesendet: Donnerstag, 30. Januar 2003 17:08
An: [EMAIL PROTECTED]
Betreff: [FW-1] SMTP Rule - 4.1 and NG FP3

Question 3:
In 4.1, our resource for inbound mail says that only accept mail addressed
to OURDOMAIN. Wouldn't DNS handle this issue, as you would never get a
HOTMAIL.COM email to your YAHOO.COM email server? Can someone clarify this?

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to