We block mail relaying at our SMTP gateway. So does having fw-1 check the destination domain have any value-added features? Is it another layer of defence, or a waste of fw-1 resources?
-----Original Message----- From: Joerg Fritsch [mailto:[EMAIL PROTECTED]] Sent: January 31, 2003 6:13 AM To: [EMAIL PROTECTED] Subject: [FW-1] AW: [FW-1] SMTP Rule - 4.1 and NG FP3 Hello, of course you can configure your Check Point FireWall as MTA. DNS does not handle this issues (SPAM), professional MTAs like MIMESweeper, sendmail or qMail behind your firewall do. I.e. in sendmail you just have to enter "OURDOMAIN" into the acces.db. I personally prefer having a single point (the mailserver oder relay) doing all the SMTP-related actions. This makes troubleshooting a lot easier and saves your firewall rescources. --Joerg http://www.firewalls-illustriert.de -----Ursprüngliche Nachricht----- Von: Christopher Collins [mailto:[EMAIL PROTECTED]] Gesendet: Donnerstag, 30. Januar 2003 17:08 An: [EMAIL PROTECTED] Betreff: [FW-1] SMTP Rule - 4.1 and NG FP3 Question 3: In 4.1, our resource for inbound mail says that only accept mail addressed to OURDOMAIN. Wouldn't DNS handle this issue, as you would never get a HOTMAIL.COM email to your YAHOO.COM email server? Can someone clarify this? ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================