>I have an Imail server with two nic cards. One connects to the
>internet the other connects to internal lan. Winproxy provides basic
>firewall services for our internal lan. How do you get mail traffic
>routed from the public ip address to the internal nic without having
>a wide open system ? We tried mapping ports 25 and 110 from external
>nic to internal and it caused winproxy to go into some sort of loop.
>Mail services in winproxy were also turned off.
I recommend that you separate your key apps like a mail server from
the machine doing secucrity.
Put the Imail machine "inside" the proxy, and have the proxy machine
do just proxy tasks.
Another layer of security would be to put a mail relay hub outside of
the win proxy to send/recv all mail with internet, and relay the mail
to thru the proxy to Imail, and have Imail forward all its mail to
the hub machine aka "bastion host" aka "chafing strap" aka
"sacrificial goat".
This removes the tedious and troublesome Internet traffic completely
from the proxy machine, which is left passing only "clean" and rapid
Imail-to-bastion traffic.
Also, IMGate as bastion mail host gives you anti-spam/anti-relay
defenses further reducing proxy traffic. A P100 and 64 megs would be
sufficient for the bastion relay.
Len
http://BIND8NT.MEIway.com: ISC BIND 8.2.2 p5 installable binary for NT4
http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
