Just babling: No/Nada/Zip/Zero outside/externally INITIATED traffic for Internal port on Firebox Allow only restricted (port + Ip base) access from outside/external INITATED traffic for Optional port on Firebox (If needed (eg. ICQ, sock5) setup proxy on Optional port and only allow traffic INITIATED from proxy server (on Optional port) to come in to Internal port) Wallah!, there you got your very own DMZ ;-) Cheers!!! Abel > ----- Original Message ----- > From: "Craig Gittens" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Thursday, January 04, 2001 12:49 AM > Subject: RE: [IMail Forum] Transfering email users and data from 1 box to > another > > > > Now that I understand what DMZ means, there is no zone on a Watchguard > > Firebox II that is demilitarized unless you specifically set the rules so. > I > > understand about the scarecrow smtp server and recommend it, but they can > be > > on the same optional eth and have different filtering rules altogether. > > > > > > Craig Gittens. > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Kevin Bilbee > > Sent: Tuesday, January 02, 2001 6:37 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [IMail Forum] Transfering email users and data from 1 box > > to another > > > > > > To tell you if this is the best place for your server would require more > > information about your security requirements. It would not be advisable > for > > you to post that information to this list. > > > > But most small companies will put the mail server in the DMZ. Larder > > companies will put their servers inside the firewall with their gateways > to > > do spam filtering and antivirus scanning on the DMZ. > > > > Kevin Bilbee > > [EMAIL PROTECTED] > > > > > > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > > to be removed from this list. > > > > An Archive of this list is available at: > > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > > > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
