Re: Gateway >> Mail Server
From: luke (luke@s-mail.com)
Date: 04/04/03
- Previous message: Kasper Dupont: "Re: CIRT Advisory CA-2003-0401: /dev/null Vulnerability"
- In reply to: Joe: "Re: Gateway >> Mail Server"
- Next in thread: Joe: "Re: Gateway >> Mail Server"
- Reply: Joe: "Re: Gateway >> Mail Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: luke@s-mail.com (luke) Date: 4 Apr 2003 01:14:52 -0800
Joe <joe@jretrading.com> wrote in message
> Do you need to accept SMTP? If you're collecting from a smarthost then
> run Fetchmail on the gateway, collecting from your ISP by POP3 and
> passing the mail to Exchange by SMTP. That avoids exposing port 25, and
> Exchange Server in particular, to the net.
>
> In that case, no port-forwarding or similar is necessary. There are
> plenty of examples of iptables NAT rules for basic firewalls around,
> none of which need to specify ports. As you say, outgoing emails will be
> handled without specific rules. You need the usual "accept anything
> going out from the LAN, and just related and established coming in"
> rules.
Hi Joe,
Thanks for your reply. Mail comes from an up-stream server (are domain
has an mx entry pointing to another exchange box(outward facing) which
has a forward rule to our exchange box) so mail is pushed to us. I
persume that any mail on the upstream server would stay on its virtual
smtp server queue until received/accepted by our exchange box.
Not to bothered about outside exposure as we are situated on a
buisness park, so it is a NATted twice.
Is fetchmail fairly straightforward to set up? I have the webmin
interface running?
Thanks Again
Luke
- Previous message: Kasper Dupont: "Re: CIRT Advisory CA-2003-0401: /dev/null Vulnerability"
- In reply to: Joe: "Re: Gateway >> Mail Server"
- Next in thread: Joe: "Re: Gateway >> Mail Server"
- Reply: Joe: "Re: Gateway >> Mail Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|