Re: Postfix smtp relay in DMZ

2013-12-10 Thread Viktor Dukhovni
On Tue, Dec 10, 2013 at 08:55:29AM +0100, Robert Sander wrote: > > It is not clear to me why one would allow the inbound delivery of > > an e-mail message (with potentially malicious links or attachments), > > but would not allow a connections to an LDAP or SQL server. The > > latter seems far le

Re: Postfix smtp relay in DMZ

2013-12-09 Thread Robert Sander
On 09.12.2013 17:34, Viktor Dukhovni wrote: > It is not clear to me why one would allow the inbound delivery of > an e-mail message (with potentially malicious links or attachments), > but would not allow a connections to an LDAP or SQL server. The > latter seems far less risky to me. But verify

Re: Postfix smtp relay in DMZ

2013-12-09 Thread Viktor Dukhovni
On Mon, Dec 09, 2013 at 12:17:14PM +0200, Andreas Kasenides wrote: > Thank you for the lead. I did not know that verify can be used in > this way. I will try it. It is not clear to me why one would allow the inbound delivery of an e-mail message (with potentially malicious links or attachments),

Re: Postfix smtp relay in DMZ

2013-12-09 Thread Andreas Kasenides
On 06-12-2013 12:01, Robert Sander wrote: On 06.12.2013 10:13, Andreas Kasenides wrote: The scenario is a classic one: 1. one or more relay SMTP servers in DMZ 2. one or more backend SMTP servers on the inside network 3. There may or may not be separate incoming or outgoing designated SMTP se

Re: Postfix smtp relay in DMZ

2013-12-06 Thread Robert Sander
On 06.12.2013 10:13, Andreas Kasenides wrote: > The scenario is a classic one: > 1. one or more relay SMTP servers in DMZ > 2. one or more backend SMTP servers on the inside network > 3. There may or may not be separate incoming or outgoing designated SMTP > servers. > > Now the desired function

Re: Postfix smtp relay in DMZ

2013-12-06 Thread li...@rhsoft.net
Am 06.12.2013 10:13, schrieb Andreas Kasenides: > The scenario is a classic one: > 1. one or more relay SMTP servers in DMZ > 2. one or more backend SMTP servers on the inside network > 3. There may or may not be separate incoming or outgoing designated SMTP > servers. > > Now the desired functio

Postfix smtp relay in DMZ

2013-12-06 Thread Andreas Kasenides
Hi everyone. Probably this has been discussed before but could not find any good methods yet. The scenario is a classic one: 1. one or more relay SMTP servers in DMZ 2. one or more backend SMTP servers on the inside network 3. There may or may not be separate incoming or outgoing designated SMT