Spam detection software, running on the system "mail.bestunion.it", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
The administrator of that system for details.

Content preview:  Christos Pelekis wrote: > Hi, > i want public ips in DMZ.
  (some software require public ips) I'd advise you to change your idea and
  chose instead private IPs on the DMZ, using 1:1 Nat to associate every 
internal
   IP to a specific public IP [...] 

Content analysis details:   (5.7 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.4 DATE_IN_FUTURE_96_XX   Date: is 96 hours or more after Received: date
-0.7 BAYES_20               BODY: Bayesian spam probability is 5 to 20%
                            [score: 0.0971]
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [151.41.0.29 listed in dnsbl.sorbs.net]
 1.9 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [151.41.0.29 listed in combined.njabl.org]


--- Begin Message ---
Christos Pelekis wrote:
Hi,
i want public ips in DMZ. (some software require public ips)

I'd advise you to change your idea and chose instead private IPs on the DMZ, using 1:1 Nat to associate every internal IP to a specific public IP

But I understand that some applications (i.e. IPSEC, some videoconferencing software, etc) is much more hard to get working on a NATed host, so if you really want to give the DMZ public IPs, just go and do it.

Remember the lowest and the highest IP in the subnet cannot be assigned to any NIC (but you can use them for doing NAT on the firewall, if you need), and that one IP must be assigned to the firewall (default gateway for the DMZ): that means, for example, that a 16 IP network gives you 13 usable addresses. If you use CARP, you must reserve an IP for every host in the cluster +1 for the virtual IP (this one becomes the default gateway for the DMZ): so in case of a two-node CARP firewall, the number of IPs available for assignement to hosts is SUBNET_SIZE-5.

Hope this helps,
Angelo Turetta


--- End Message ---
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to