Re: FWTK and smap/smapd

[David Lang <david.lang () digitalinsight com>]

the problem is that smap/smapd predate spam and so if installed without
patches will result in an open relay (since when sendmail is called to
deliver the emssage it will always see it as origionating from the
firewall.

there are patches to add anti-relay (and other anti-spam) features to
smap/smapd. I haven't used them so I can't comment on them (since we
appear to be out of the days of sendmail bug-of-the-day it's no longer
suicide to run sendmail, postfix, or qmail as your gateway, so I use one
of them instead)

David Lang

 On Tue, 16 Jul 2002, Marcus J. Ranum wrote:

> Date: Tue, 16 Jul 2002 12:41:27 -0400
> From: Marcus J. Ranum <mjr () ranum com>
> To: "Behm, Jeffrey L." <BehmJL () bvsg com>, firewall-wizards () honor icsalabs com
> Subject: Re: [fw-wiz] FWTK and smap/smapd
>
> Behm, Jeffrey L. wrote:
> > Is the Firewall Toolkit still a viable solution nowadays? At least as an
> > email gateway with smap/smapd-type functionality?
>
> It's probably still viable; but much of the functionality of the
> toolkit has been supplanted by larger more popular and complex
> applications. For example, for a good mail proxy consider postfix,
> for a good web proxy consider squid, etc. Just make sure you configure
> them with maximum care. Smap/smapd were not written to be particularly
> efficient (compared to, say, postfix) and may bog down a high volume
> gateway.
>
> I use postfix these days. ;)
>
> mjr.
> ---
> Marcus J. Ranum                               http://www.ranum.com
> Computer and Communications Security  mjr () ranum com
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards