Damian O'Sullivan wrote:
> Also, at work we have an internal lan 10.201.102.* It is connected through
> a CISCO Pix firewall. We have a Solaris box either side of firewall for
> e-mail. The one outside forwarding on to the internal one. There is a
> conduit and static route set up in the firewall to map to the internal
> box. What I was wondering is would it be possible to just skip the outside
> one and change my MX records to point direct to the internal one (the
> static IP given by the firewall). What is the advantage of having a box
> outside the firewall?? The inside box would be a new 6.1 RH install..
the internal box will then be connected to the net
sendmail has had some "features" in the past
are you sure that your solaris box is secure
we use the tis toolkit which has an smtp proxy which guards against this
type of attack
keep the external machine
--
simon
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!