Great Circle Associates Firewalls
(July 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: HTTP Server and Mail Server
From: C Matthew Curtin <cmcurtin @ research . megasoft . com>
Date: Tue, 30 Jul 1996 07:31:48 -0400
To: Dan Schimpf <dschimpf @ mtvernon1 . accessus . net>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <199607251944 . OAA19832 @ mtvernon1 . accessus . net>
References: <199607251944 . OAA19832 @ mtvernon1 . accessus . net>
Reply-to: cmcurtin @ research . megasoft . com

>>>>> "Dan" == Dan Schimpf <dschimpf @
 mtvernon1 .
 accessus .
 net> writes:

Dan> We are already using xxx.com.  They http site is also requesting
Dan> (demanding) to use www.xxx.com also.  I'm fairly new in setting
Dan> internet services up.  Can we have an alias posted to the world
Dan> for 'www.xxx.com' or do can we have our firewall (or router for
Dan> that matter) forward any requests on port 80 to the http machine
Dan> at our contracted site and let all of our e-mail through to our
Dan> local server???

Demanding. Ha. Maybe you should remind them ("one of us is the
customer, and it would not be you.")

Anyway, this is an easy fix with DNS.

Web server is 1.2.3.4
your mail relay is 4.3.2.1

In the DNS, make:
    * an A record for www.xxx.com to be 1.2.3.4
    * an A record for mail.xxx.com to be 4.3.2.1
    * an MX record for xxx.com to mail.xxx.com

If you want to completely delegate the web service to them, including
mail to www.xxx.com (i.e., webmaster @
 www .
 xxx .
 com), then ignore this
section:

{
   * (maybe) an MX record for www.xxx.com to mail.xxx.com

And *tell* your web hosting folks that they *will not* run an SMTP
daemon on your web server. And periodically check to make sure that
they don't, otherwise, they will pick up mail for www.xxx.com.

}

If they also want it so that http://xxx.com/ will work just as
http://www.xxx.com/, tell them that you're not going to give them the
address or alias records, because you want to keep mail to xxx.com
coming in to your machines, and you don't want to make your own
services interruptable by someone making an error at their site.

-- 
C Matthew Curtin        MEGASOFT, LLC        Director, Security Architecture
I speak only for myself.  Don't whine to anyone but me about anything I say.
Hacker Security Firewall Crypto PGP Privacy Unix Perl Java Internet Intranet
cmcurtin @
 research .
 megasoft .
 com http://research.megasoft.com/people/cmcurtin/


References:
Indexed By Date Previous: Re: Fw: Remote Access Software
From: C Matthew Curtin <cmcurtin @ research . megasoft . com>
Next: DESZIP
From: Julian Assange <proff @ suburbia . net>
Indexed By Thread Previous: HTTP Server and Mail Server
From: Dan Schimpf <dschimpf @ mtvernon1 . accessus . net>
Next: Re: HTTP Server and Mail Server
From: Andy Wheeler <andy @ wheels . net>

Google
 
Search Internet Search www.greatcircle.com