Okay I'll add another spanner to your works, I would advise an SMTP relay server on your DMZ but I really wouldn't use McAfee Webshield. Why I hear you cry for one it is pretty bad at blocking viruses and two we have had no end of problems with it crashing or not sending to certain domains when it gets a DAT update. Why not use the SMTP component of IIS as your SMTP relay server and then use ScanMail or Antigen on your Exchange server. Either that or use someone like MessageLabs to outsource your antivirus too.
Regards, Paul -----Original Message----- From: Rob Ellis [mailto:[EMAIL PROTECTED]] Sent: 06 June 2002 18:26 To: Exchange Discussions Subject: lesser of the evils - ssl or smtp Ok, I've got a couple of scenarios, which of them is the least risky? Exchange 2000 mailbox server on the LAN, accepting/making connections using SMTP through a firewall to the internet Exchange 2000 mailbox server on the LAN, accepting SSL secured OWA connections from the internet, again, protected by a firewall. Basically I am being told I may have to do both with the same box, but I'd rather have the smtp traffic going through a DMZ based gateway running McAfee Webshield, and let the OWA clients come into the internal box over SSL (which I see as less of a risk than opening up port 25. If you had to choose one of the 2 above scenarios, which would it be? Regards, Rob Ellis _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] ---------------------------------------------------------------------- If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to http://www.drkw.com/disc/email/ or contact the sender. ---------------------------------------------------------------------- _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
