Question about security and putting a POP3 client in DMZ

[PeNT]

Hi all,

We have just put a tracking system on our WebServer/Mail relay client on our DMZ box. Its running off a PIX515E.

I only have port 25 for smpt being opened to deliver mail to Internal.

THe new tracking software we have installed has a POP3 client which needs to access the internal mail server.

I have security concerns about opening port 110(POP3) from DMZ to internal

I know that the mailguard feature is protecting SMTP, does POP3 get protected as well.

Should i go ahead with this.

thanks for your help

 

[lgarner]

First rule: If you need it for a business reason, then you need it. I personally am not so afraid of POP3. I would permit it only from the web server and only to its designated mail server.

Otherwise, you could have mail forwarded to a mail server in the DMZ.

 

[PeNT]

Thanks for the reply. I'll try it.