Hi Dietmar
>we are working on the migration of our mailserver and will have a
>scenario like this:
>
>
>Firewall ---> SMTP Gateway ( Mimesweeper & Sophos ) ---> new Imail
>with declude
>planned
>
>smtp-in only to gateway.
>pop, imap and www only to new imail.
>smtp - out only from new imail.
>
>
>SMTP Gateway and Imail will run on different machines.
>
>
>Is it possible to combine IMail with the Sophos Antivirus Software and
>Declude on one machine ?
>
>Any ideas ? ( Len and Scott ;-) )
If you can fold the AV stuff onto your Declude/imail box (Scott to
confirm), then move your SMTP gateway outside of the firewall, doh.
1. internet
2. border router with packet filtering
3. DMZ with bastion host/smtp gateway (I have a recommendation for
what you could use here :))) )
4. firewall
5. Private net with Imail/Declude/Sophos
The advantage of this classic setup is that your traffic in the
firewall is much lower (no spam, no dangerous attachments, a lot of
viruses blocked by the smtp gateway header/body filters, max msg size
limits enforced (no 650 megabyte porno cdroms as attachments) etc,
etc) and rules in the firewall are much simpler (internet can not
send to Imail dire, imail only gateways out to IMgate ( ooops, WTF
dat ist? ).
Also, Imail does not do DNS lookups or internet deliveries, all that
traffic ist outside die feuervahl, yah, werry gute ist.
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
