At 1/26/2002 10:50 AM -0500, you wrote:
>Just tell it what ports you want to listen on and it will not listen on any
>others. It's the same as what RH does to prevent any listening on outside
>ports by default. You can list as many as you need.
>
>DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')
>DAEMON_OPTIONS(`Port=smtp,Addr=192.168.0.1, Name=MTA')

Perfect; I thought you could only have one and didn't figure out how to 
delimit the two IP addresses. Now it makes sense.

> > 2. Set iptables rules to redirect *all* mail connections from the inside to
> > the firewall's sendmail, then have sendmail make final delivery. A
> > transparent mail proxy, if you will.
>
>I'm not sure I understand this part. Maybe ascii art is in order. Or at least
>an example of the flow of the mail.

Sorry; the description really wasn't that good. I'm only talking about 
*sending* mail from inside that network, not receiving. I'd like iptables 
to take all outbound traffic to port 25 and redirect it to its own port 25; 
then sendmail will actually deliver out to the Internet.

Think of a transparent web proxy; I just want to do the same thing to 
outgoing mail. Later on I'll integrate virus scanning and other features 
into this mix, which is why sendmail should relay *all* outbound mail from 
this network and not allow direct SMTP to the outside.


--
Rodolfo J. Paiz
[EMAIL PROTECTED]



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to