RE: DMZ and Port Mapping

From: aptrsn (busn66@hotmail.com)
Date: 01/31/02 

From: "aptrsn" <busn66@hotmail.com>
Date: Wed, 30 Jan 2002 23:23:51 GMT

Hi,

        I've been using WinRoute Pro for a while to provide proxy and DNS
services for the networks I admin. Now I'm planning on complicating things a
bit in adding a DMZ which will host our mail server. My question is, can you
still use the Mail Server portion of the program while allowing for your
users to access the mail server in the DMZ. Is there anyone out there that
has used WinRoute Pro to maintain a DMZ in general, I would really
appreciate any feed back on this topic.

Thanks 

--
******************************************
*     Aaron Patterson
*     FFG Netadmin
*     busn@owc.net
*
*    "Just remember, no matter
*      where you go, there you are."
*
*******************************************

Relevant Pages

  • Re: samba backup through firewall
    ... > This sounds as if you are running the mail server on some windoze platform ... ALL connections to the DMZ should be from ... > host, they are limited in what they can do. ... > relays it to an internal mail server where distribution actually occurs. ...
    (alt.computer.security)
  • Re: Firewall and DMZ topology
    ... If the MAIL server is in the DMZ. ... >able to sniff all the traffic on the internal side of the firewall, ... >>The Gartner Group just put Neoteris in the top of its Magic Quadrant, ...
    (Security-Basics)
  • RE: Email server+network architecture
    ... There doesn't have to be ONE DMZ. ... "internal" mail server. ... Communications with 'customer data' are not permitted ... permit smtp/POP3 to all users outside, and this does not meet the 'no ...
    (Security-Basics)
  • Re: Firewall and DMZ topology
    ... Tha basic idea is that the firewall will ... So the LAN will be isolated ... from the DMZ ... ... > If the MAIL server is in the DMZ. ...
    (Security-Basics)
  • Re: Mail server security - best practices?
    ... The mail server in the DMZ does not need to have access to port 25 on ... As a stateful firewall, pf can be ... Is it because email is "quantified" when moved to the internal network? ...
    (comp.unix.bsd.openbsd.misc)