Re: Re: Code Red: What security specialist don't mention in warnings (Frank Knobbe)

["R. DuFresne" <dufresne () sysinfo com>]

On Thu, 2 Aug 2001, Dustin D. Trammell wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: MD5
>
> JS> Also, what if your web server needs to send outbound email (confirmation
> JS> messages, etc.)...
>
> With this, I usually forward all e-mail to the network's internal smtp
> gateway, who has proper access to send outbound mail to the Internet.
> Works well since there's minimal configuration on the webserver, and
> no additional configurations to my network policies.  I rarely run
> into networks that do not have a designated internal smtp gateway or
> proxy of some form.

Does this not make your DMZ a indirect email relay?

Thanks,

Ron DuFresne
-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior consultant:  darkstar.sysinfo.com
                  http://darkstar.sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards