Re: Postfix in DMZ ?

On Thursday, September 23, 2004 at 22:53 CEST,
Curtis Vaughan <curtis@npc-usa.com> wrote:

> Here's what I want to do, I'm just not sure about the best solution.
>=20
> We have IPCop as the gateway server (doing port forwarding and=20
> maintaining 2 VPNs).
> Behind it, we have 1 Postfix server w/Courier IMAP and 1 Exchange 5.5=20
> Server (soon to be moved to another Postfix server).
>=20
> I want to put a mail server in the DMZ, whose sole purpose will be to:
> 1) authenticate all users for SMTP w/SSL;
> 2) accept all incoming mail and only relay that mail for internal=20
> recipients to the appropriate recipient.
>=20
> I think that's it for now.
>=20
> So, if I put postfix and Courier IMAP on that server, as well as all=20
> accounts and passwords, would that be an appropriate solution?

Sure.

> Also, I'm a little confused as to how a mail server in the DMZ would
> route mail to the internal network. Or is that something it wouldn't
> have to worry about, but IPCop would (since it's the router).

http://www.postfix.org/STANDARD_CONF....html#firewall
http://www.postfix.org/postconf.5.html#transport_maps

--=20
Magnus B=E4ck
magnus@dsek.lth.se