Mailinglist Archive: opensuse-security (670 mails)
| < Previous | Next > |
RE: AW: [suse-security] Network setup (howto configure iptables) ...
- From: "Reckhard, Tobias" <tobias.reckhard@xxxxxxxxxxx>
- Date: Wed, 14 Nov 2001 06:40:34 +0100
- Message-id: <96C102324EF9D411A49500306E06C8D1A56C02@xxxxxxxxxxxxxxxxx>
Ray,
> Good question. Firstly it's a file server too. Secondly, the bulk of the
> mail is
> internal, so to minimize traffic across the firewall / router. And lastly
> because it's the domain controller for the internal network (also DHCP).
>
Put a mail relay (i.e. SMTP proxy) and a POP3 proxy into the DMZ. I wouldn't
want such an important machine with as much sensitive data (user accounts)
to receive packets directly from the Internet..
HTH
Tobias
> Good question. Firstly it's a file server too. Secondly, the bulk of the
> mail is
> internal, so to minimize traffic across the firewall / router. And lastly
> because it's the domain controller for the internal network (also DHCP).
>
Put a mail relay (i.e. SMTP proxy) and a POP3 proxy into the DMZ. I wouldn't
want such an important machine with as much sensitive data (user accounts)
to receive packets directly from the Internet..
HTH
Tobias
| < Previous | Next > |