RE: RE: Front End/Back End communication

At Tuesday, May 16, 2006 12:02 PM, Bryan S. Sampsel wrote:

> One thing you can do is put a mail relay, whether it's Qmail or
> Postfix, on BSD or Linux, and stick that in your DMZ.  Then, only
> open the SMTP port into and out of your DMZ (lock down the rest) for
> traffic to pass to your internal mail server.  That opens up a much
> smaller hole for your internal systems.

Remember, though, that the FE/BE architecture isn't the same thing as a
bridgehead server. An FE server doesn't have to be an SMTP bridgehead,
so putting something like Postfix out in the DMZ may solve some aspects
of the problem, but doesn't address the client access issue.

-- 
Devin L. Ganger                    Email: deving@3sharp.com
3Sharp LLC                         Phone: 425.882.1032 x 109
15311 NE 90th Street                Cell: 425.239.2575
Redmond, WA  98052                   Fax: 425.702.8455
(e)Mail Insecurity: http://blogs.3sharp.com/blog/deving/

---------------------------------------------------------------------------
---------------------------------------------------------------------------