Re: reverse proxy

On Thu, Apr 01, 2010 at 12:50:04PM -0600, Glenn English wrote:

>
> On Apr 1, 2010, at 12:25 PM, Victor Duchovni wrote:
>
> >> Is it possible to use postfix as a reverse proxy for my SMTP server?
> >
> > Yes, but why?
>
> Because I was told over on the mailop list that it needs to be done
> for security reasons, and I'm looking into whether to believe it or not.

What is the "it" that has to be done for "security reasons". Normally
Postfix is a store/forward MTA not a reverse proxy, and this is likely
more secure, because SMTP commands are fully generated by Postfix,
rather than proxied through.

If you don't need proxy-mode for non-security reasons, you don't need
proxy mode.

-- Viktor. P.S. Morgan Stanley is looking for a New York City based, Senior Unix system/email administrator to architect and sustain our perimeter email environment. If you are interested, please drop me a note.

• This message: [ Message body ]
• Next message: Daniel Cizinsky: "Messages held in hold queue didn't bounce after release"
• Previous message: Stephen Carville: "Re: Unconditional Accept for mynetworks"
• In reply to: Glenn English: "Re: reverse proxy"
• Next in thread: Glenn English: "Re: reverse proxy"
• Reply: Glenn English: "Re: reverse proxy"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]