[fw-wiz] FWTK and smap/smapd

From: Behm, Jeffrey L. (BehmJL@bvsg.com)
Date: 07/16/02 

From: "Behm, Jeffrey L." <BehmJL@bvsg.com>
To: firewall-wizards@honor.icsalabs.com
Date: Tue Jul 16 09:40:14 2002

Is the Firewall Toolkit still a viable solution nowadays? At least as an
email gateway with smap/smapd-type functionality?

My situation is that I want to build an email gateway, located in a DMZ that
simply accepts email from the Internet, and forwards into the Internal
network (and vice versa - i.e. accept from Internal network and forward to
Internet).

I really just want Gauntlet's smap/smapd functionality as the receiver, in
conjunction with sendmail as the deliverer. It doesn't seem morally right to
just strip the code from an existing Gauntlet, so this lead me to the FWTK
site. Looking for the last released version I found:

"The latest released/stable version is 2.1. It was released on February
27th, 1998. However, a second version of 2.1 was released on March 2nd,1998
which fixes a minor bug."

which made me wonder whether this smap/smapd was still "up to par" in
today's environments. I feel pretty comfortable securing a Solaris machine
down to just the minimum requirements, so no need to 'splain the details of
how to secure it down to run only an email gateway. I am looking for info on
"Should this still be used in a commercial, production environment?" and "Is
the config similar to Gauntlet's netperm-table, or what?"

The license agreement appears to me to say only "Non-Commercial" and I want
to abide by that if I have interpreted it correctly. (Is there anyone still
at tislabs.com after being sold one more time to Secure Computing?)

If it is truly only for non-comm use, anyone have any suggestions on
alternatives? I don't really want to use sendmail as a receiver, exposed to
the Internet and all that jazz. I have looked at postfix (minimally), but I
just didn't get a good feeling about using it, but maybe I need to take
another look.

Any help is appreciated.

Relevant Pages

  • Re: [fw-wiz] FWTK and smap/smapd
    ... >Is the Firewall Toolkit still a viable solution nowadays? ... >email gateway with smap/smapd-type functionality? ...
    (Firewall-Wizards)
  • Re: [fw-wiz] FWTK and smap/smapd
    ... > email gateway with smap/smapd-type functionality? ... > simply accepts email from the Internet, ... > at tislabs.com after being sold one more time to Secure Computing?) ... I don't really want to use sendmail as a receiver, ...
    (Firewall-Wizards)
  • Re: Suspecious DNS queries dropped by Firewall
    ... do you think that internal users trying to send emails directly to internet? ... Email delivery is taken care by Email Gateway device, obviously, DKIM verification can only be done by Email gateway of my company... ... How does internal client make DKIM query which uses the TXT record in DNS? ... Can you tell me list of URL which size exceed 514 bytes to verify whether my internal server truncate/return failure code when query such URL using UDP query? ...
    (comp.protocols.dns.bind)
  • [opensuse] Can SuSEfirewall2 restrict requests originating on the host and routed using masquerade?
    ... Previously, on Debian, I was using FireHOL to configure IPTables to setup a Internet and email gateway; routing only HTTP/HTTPS requests from internal IPs to the Internet ... I thought I read in the openSUSE security manual that the firewall does NOT put restrictions on packets that originate on the host but only incoming packets. ... this applies to packets that are routed using masquerade since I cannot find anywhere to specify particular services. ...
    (SuSE)
  • Re: [fw-wiz] FWTK and smap/smapd
    ... > My situation is that I want to build an email gateway, located in a DMZ that ... > simply accepts email from the Internet, ...
    (Firewall-Wizards)