Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Mar 1998 15:10:07 -0800
From:      "Shin'ichiro Seto/OTESS, Inc." <mluser01@otess.com>
To:        questions@FreeBSD.ORG
Subject:   Mail Server should be inside of ipfw ?
Message-ID:  <199803122314.PAA20938@otess.com>

next in thread | raw e-mail | index | archive | help
Hi folks,

This is a kind of generic issue but I hope someone will give me an idea.

I'm going to have two FreeBSD boxes at our customer site as Internet servers.
One will be ipfw + proxy + dns, and the other one will be mail + web + dns.

I wonder if mail server exists inside of the firewall is better or outside.

If it were inside, crackers would attack the intranet through sendmail.
I don't know how but I'm saying a possibility. Also, the mail server will
be http server. This means that they could get into the intranet using 
cgi program if the program were so stupid.  

If it were outside, it'd be easier to crack down the mail server itself and
get the passwd file.


If anyone has same situation, please let me know which one is better and why.
Or, If I have to have a firewall program instead of ipfw to say "This site
has a firewall", please give me any idea on firewall.

I feel like "to be or not to be". :-)


Thanks in advance,



   



+--------------------------------+-------------------------------+
| Shin'ichiro Seto               | E-Mail:  sseto@OTESS.COM      |
| Open TEchnology SolutionS, Inc.| URL:     http://www.otess.com |
| 23272 Mill Creek Dr. Suite 220 | Tel:     714-951-6600 ext105  |
| Laguna Hills, CA 92653         | Fax:     714-951-6700         |
+--------------------------------+-------------------------------+
|   ***** Your Door to the Solutions *****       OTESS, Inc.     |
+----------------------------------------------------------------+

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199803122314.PAA20938>