Great Circle Associates Firewalls
(March 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall Sun sendmail configuration examples
From: tries @ landmark . mitre . org
Date: Fri, 25 Mar 94 08:13:56 -0500
To: John Larson <jlarson @ parc . xerox . com>
Cc: firewalls @ greatcircle . com, tries @ landmark . mitre . org
In-reply-to: Your message of Fri, 25 Mar 94 03:24:55 -0800. <94Mar25 . 032153pst . 67142 @ vertigo . parc . xerox . com>

>Does anyone have minimal mods to the Sun sendmail configurations for both a
>firewall SMTP gateway and an internal POP machine WITH the case of using
>DNS libraries instead of NIS/hosts ?  Or perhaps a good pointer to a
>reference with good concrete examples ?  Required DNS database additions
>might be helpful also if anything significant needs to happen there.

John,

I do have modifications but they won't work for you unless the DNS on
your firewall is set up like ours. This is the set-up: There are two DNS 
servers, one internal and one external who both think they are authoritative
for the domain, but their zone files are different. The internal server has
the normal info for internal machines (A, MX) while the external server has
a wildcard MX for the whole domain to the SMTP proxy and A records for all of
the firewall machines. All resolvers in the domain point to the inside server,
while Internet machines query the outside server. The internal server is a 
slave forwarder to the external machine.

Mail then works like this: when the SMTP proxy receives mail, he sends it 
directly to the internal mail hub (your POP server) if it is destined for the
local domain, else he looks up the destination in the DNS and sends it to the proper
external mail exchanger. When the internal mail hub receives mail he sends it
to the proxy if it is not destined for the local domain, else he looks it up in 
DNS and sends it to the proper internal destination. All mail then goes through
the mail hub even if it is internal machine to internal machine (this isn't
necessary, it's just easier so you don't have to make major mods to all internal
machines).

I will send the files to you directly. Anyone else interested can ask.

Tom

------------------------------------------------------
Thomas R. Ries                 Voice: (703) 883-5500
Networking Tech. Center        FAX:   (703) 883-7142
The MITRE Corporation
MS W657, McLean, VA 22102

tries @
 gateway .
 mitre .
 org
------------------------------------------------------


References:
Indexed By Date Previous: Firewall Sun sendmail configuration examples
From: John Larson <jlarson @ parc . xerox . com>
Next: Re: IP filtering/port question
From: johns @ oxygen . house . gov (John Schnizlein)
Indexed By Thread Previous: Firewall Sun sendmail configuration examples
From: John Larson <jlarson @ parc . xerox . com>
Next: Re: Firewall Sun sendmail configuration examples
From: smoot @ tic . com

Google
 
Search Internet Search www.greatcircle.com