Mail server location

[bp1169]

We are debating where the best place to place a mail relay server. We have had recommendations that the relay be placed in the dmz and relay to the mail server on the inside interface (which requires ports from the dmz to the inside be opened). Others have recommended the relay be placed inside (parallel) and relayed internally to the mailserver.

Does anyone have a similar setup, pro/cons of either?

 

[cbeazley]

We are currently setup with a relay in a dmz. This suits our needs well because we can controll specific source access at the firewall. If you put the relay internal you need to allow anyone access to send mail to it. In summary, there is more control if put in the dmz.

 

[yizhar]

HI.

You can place the mail relay in DMZ, and configure the mail server to pull the mail from mail relay instead of mail relay pushing to internal server.
This can be done for example using POP3 protocol and software like PopBeamer.

That way you can avoid any traffic initiated either from outside or dmz to internal network.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar