I have a question for everyone running SA on a gateway. Are all of you
checking against a user list, or are you forwarding everything to internal
and letting the internal reject on unknown users? 

Also, do you scan outgoing, or simply let it pass?

I check against a user alias list on the gateway. No users accounts exhist,
only aliases to procmail scripts. (This rocks with only one small side
effect of no read-receipts are sent out of company. Which I think is great!)

Connecting via LDAP would lower admin overhead, but open up a port I don't
wish to for security reasons. So I have to run a 'newuser' script for new
employees on the gateway when I setup them on the internal. No biggy. 

Our outgoing email doesn't even touch the gateway system :) The gateway is
actually in a sort of email DMZ. Where only email traffic is allowed to get
to it. Yes I actually have to get my butt up and go to console to work on
it. Tight security has its price. I don't know why I'm so tight about it.
Someone might find out we are out of peridot colored crystals! Oh no! :) 

Chris Santerre 
System Admin and SARE Ninja
http://www.rulesemporium.com
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin 


>-----Original Message-----
>From: Ronald I. Nutter [mailto:[EMAIL PROTECTED]
>Sent: Tuesday, June 22, 2004 1:31 PM
>To: [EMAIL PROTECTED]
>Subject: Putting Spam Assasin between the internet and my mail server
>
>
>I am looking to implement Spamassasin.  I have probably overlooked 
>something but cant find a way that I can have it sit between the
>Internet
>and my mail server.  I am using Exchange 2000 and converting from it
>to something else wont happen for a while.  Is there a way to have it
>function as a smtp proxy for lack of a better word ?
>
>--------------------------------------------------------------------
>Ron Nutter                          [EMAIL PROTECTED] 
>Network Manager
>Information Technology Services                         
>Georgetown College                                     
>Georgetown, KY                                            
>--------------------------------------------------------------------
> 
>

Reply via email to