-----Original Message-----
From: Dan Johansson [mailto:Dan....@bluewin.ch]
Sent: Thursday, October 03, 2002 11:12 AM
To: cour...@lists.sourceforge.net
Subject: [courier-users] Courier behind a Firewall
Hi,
I´m new to Courier and this list so please be kind to me.
I´ve set up Courier succefull (I think) on a host in my network.
This Network is behind a Firewall (consisting of a Router (doing NAT)
and a hardened Linux box). Courier works fine for "internal" mail, and
now I would like it to recieve mail from te rest of the world.
So my qustion is what to do on the FW. Schould I only put
some general-
gateway on my FW that only passes TCP-connections on port 25 from
the WAN sid to the Courier Mail-Server on the LAN side.
The Courier box will need to have a static IP to the outside (probably via a
static NAT on your router). Then just tell the firewall to allow
connections to port 25 on your Courier box. I could give you instructions
for a Cisco firewall, but I'm not familiar enough with iptables (or
ipchains).
Or do you have
any othe suggestion (No I don´t want to run my mailserver on the FW).
Running extra software on your firewall is generally not a good idea if you
can avoid it. If you do, then a vulnerability in your other applications
could give a hacker direct access to your firewall box.
Bowie