[fetchmail]Re: help on smtp forwarding via fetchmail

Ferda Ozdemir writes:

> I am trying to forward smtp requests to my mail server (QMail). I am 
> attaching a picture showing the configuration. 
Incidentally, your picture does not show a true DMZ. If someone compromises 
your reverse-proxy machine, they have full access to all machines everywhere 
on your internal network. If you aren't using switched hubs, then they can 
use a packet sniffer to view every byte of data passing over the network 
too. 

Ideally, the DMZ should be separated from the internal network by yet 
another firewall - or perhaps by being on a separate physical network 
segment off the same firewall - with some restrictive forwarding rules.
--
Bill Michell
bill(_at_)mics(_dot_)org(_dot_)uk (home)