Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 Aug 1997 15:54:47 +0200
From:      sthaug@nethelp.no
To:        jerryk@iquest.net
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: sendmail on a firewall box
Message-ID:  <2482.871912487@verdi.nethelp.no>
In-Reply-To: Your message of "Mon, 18 Aug 1997 08:41:54 -0500"
References:  <33F85122.41C67EA6@iquest.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> > > I just want one box that provides the services to my small LAN. I want
> > > that box to be the mail host for my company and also provide a
> > > firewall/proxy service.
> > 
> > Sounds like you should buy a Whistle Interjet :-) (www.whistle.com)
> 
> Yeah, well, the ISP's around here haven't even heard of the Interjet.
> Besides, it's not that economical. I can build a FreeBSD box and
> configure
> it for much less money!

Well, the Whistle Interjet *is* a FreeBSD box :-). But it's hidden.
Yes, you can get much of the same functionality with ipfw or ipfilter.
It all depends on how much your own time is worth.

> > Anyway, given sendmail past history I'd feel very uncomfortable with
> > sendmail in any sort of security-related function. Why don't you look
> > at qmail (www.qmail.org) instead? This was written with security in
> > mind.
> 
> Thanks for the tip. I'll look into it. It's interesting how some will
> say that it's OK to run sendmail on the firewall box and others will
> cringe at it!

A fairly common way to do this is SMAP (from the TIS toolkit) plus
sendmail. I doubt you'll find many people serious about security who
will want to go for sendmail alone.

Steinar Haug, Nethelp consulting, sthaug@nethelp.no



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2482.871912487>