From: "Gaby Schilders" <G.Schilders@ibfd.org>
To: George Vieira <georgev@citadelcomputer.com.au>
Cc: netfilter list <netfilter@lists.netfilter.org>
Subject: RE: local DNAT with bind,postfix,and iptables
Date: Thu, 16 Oct 2003 08:23:12 +0200 [thread overview]
Message-ID: <DAAAFFB7B8C62F40BC87BF3E729F79E1296039@ibfdmail.ibfd.oin> (raw)
Actually, I was referring to the 1-server setup needing 'voodoo' to get it working in a similar fashion to the current 2-server setup. ;)
I don't judge. Everyone can decide for themselves what's the best solution for their case! :D
(From a security point of view, I've always taken the stance that as little as possible should be running on the firewall. Especially nothing like Bind or a mail-server. It's only my opinion, though.)
Gaby Schilders
IBFD network admin
-----Original Message-----
From: George Vieira [mailto:georgev@citadelcomputer.com.au]
Sent: donderdag 16 oktober 2003 8:17
To: Gaby Schilders; Carlo Florendo
Cc: netfilter list
Subject: RE: local DNAT with bind,postfix,and iptables
> 1) Postfix trick mentioned by George (and obviously having
> only one postfix box instead of two with a voodoo like setup
> to compensate... ;-)
>
hey, that ain't voodoo man.. ;P I use this method to stop people going straight to my internal Microstop Exchange box and forced to go through my postfix box which as a transport file to relay internal but the machine itself.. This enables me to control the mail as well as setup RBL and free antivirus setup using linux...
Otherwise just put a smart host entry on your sendmail/postfix/firewall box to use the internal server for relaying out.. but I prefer my transport idea... that's what it was made for... ;P he he
Thanks,
____________________________________________
George Vieira
Systems Manager
georgev@citadelcomputer.com.au
Citadel Computer Systems Pty Ltd
http://www.citadelcomputer.com.au
Phone : +61 2 9955 2644
HelpDesk: +61 2 9955 2698
> -----Original Message-----
> From: Gaby Schilders [mailto:G.Schilders@ibfd.org]
> Sent: Thursday, 16 October 2003 4:08 PM
> To: Carlo Florendo
> Cc: netfilter list
> Subject: RE: local DNAT with bind,postfix,and iptables
>
>
> Perhaps I'm out of line here, but there are several ways
> leading to Rome, as they say here.
>
next reply other threads:[~2003-10-16 6:23 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-10-16 6:23 Gaby Schilders [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-10-16 6:16 local DNAT with bind,postfix,and iptables George Vieira
2003-10-16 6:07 Gaby Schilders
2003-10-16 22:53 ` Carlo Florendo
2003-10-16 2:17 George Vieira
2003-10-16 22:49 ` Carlo Florendo
2003-10-16 1:09 George Vieira
2003-10-16 18:11 ` Carlo Florendo
2003-10-14 22:06 DNAT for locally generated packets Carlo Florendo
2003-10-16 16:55 ` local DNAT with bind,postfix,and iptables Carlo Florendo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=DAAAFFB7B8C62F40BC87BF3E729F79E1296039@ibfdmail.ibfd.oin \
--to=g.schilders@ibfd.org \
--cc=georgev@citadelcomputer.com.au \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).