On 2009-10-04 mouss wrote:
> Ansgar Wiechers a écrit:
>> On 2009-10-02 Augusto Casagrande wrote:
>>> Sorry my mistake , it was actually postconf -n (as you can see ,
>>> there are no default options).
>>>
>>> The users mailboxes are in the LAN MTA
>>>
>>> The route for inbound is : Internet->MX->DMZ MTA->LAN MTA
>> 
>> Is your DMZ server supposed to be the MX or do you have a third
>> server that is acting as MX?
>> 
>> Anyway, I'd strongly discourage using a setup where a DMZ server
>> relays mail to an internal server, because that would effectively
>> break the DMZ. An (IMHO) better approach would be to make the DMZ
>> server the endpoint for inbound mail, and then have your LAN server
>> pull the mail from it.
> 
> what kind of "pull" do you have in mind? if it's fetchmail or the
> like, then no.

Why?

> anyway, it is ok to relay mail from the DMZ to the LAN.

No.

Regards
Ansgar Wiechers
-- 
"Abstractions save us time working, but they don't save us time learning."
--Joel Spolsky

Reply via email to