Re: SMTP troubles (AGAIN!)

["Tom Jedrzejewicz" <tomjedrz@xxxxxxxxx>]

On 4/12/06, James H H Lampert <jamesl@xxxxxxxxxxx> wrote:
>
> I'm not entirely sure of this, but I *think* the mail
> server is *outside* the firewall (again, the one in the
> Linksys router), while the AS/400 that's sending the email
> is most definitely *inside* the firewall.


This is not a good practice; the mail server should be protected by the
firewall, particularly as it is a Windows server.  I am kind of curious to
find out why it was done, if indded it is the case.

I have seen instances when a company has an external mail server AND an
internal mail server, with the external one serving essentially as
anti-spam/anti-virus and not keeping any mail.  But having all of the
corporate mail stored outside the firewall seems dangerous.

And I *am* certain that when we had relaying enabled under
> the old mail server, it *was* by IP address.


Relaying is much safer when the mail server is behind the firewall, because
only the internal network can get to it to relay.  Setting up NAT and
publishing the mail server is very straight-forward; the firewall gui likely
has a wizard to do it.

--
Tom Jedrzejewicz
tomjedrz@xxxxxxxxx