Re: Installing a mailgate on orange, IPCop v2.1.9

On Tuesday 26 Apr 2016 05:46:19 you wrote:
> --------------------------------------------
> On Tue, 26/4/16, Administrator <[email protected]> wrote:
> 
>  Subject: Re: [IPCop-user] Installing a mailgate on orange, IPCop v2.1.9
>  To: "Chris Bell" <[email protected]>
>  Cc: "IPCop user" <[email protected]>
>  Date: Tuesday, 26 April, 2016, 0:02
> 
>  > On
> 
>  25 Apr 2016, at 18:20, Chris Bell <[email protected]>
> 
>  wrote:
>  > Hello,
>  > I want to install a filtering smtp(s)
> 
>  mailgate on orange with smtp(s) output
> 
>  to a mailserver on green. The mailgate will be required to
>  run DNS, blacklist,
> 
>  > and virus checks,
> 
>  with exim, spamassassin, and clamav, refuse/deny junk before
> 
>  > it is accepted, and must also receive
> 
>  security and operating system updates.
> 
>  This will require DNS and access to specified blacklists as
>  well as system
> 
>  > mirrors. Is this
> 
>  possible, or should it connect via blue instead?
> 
>  > Thanks for any advice.
>  > Chris 

> 
>  I can’t claim to have ever done it, but this
>  is exactly what Orange is designed for.  The only bits
>  which won’t be “out of the box" will be the routing
>  from the server to green, routing from the outside to the
>  mailgate, and getting mailgate to answer using IPCop’s
>  external IP address.
> 
>  Have
>  fun!
>  David
>  --------------------------------------------------------------------------
> ----
> 
> Hi,
> 
> If you manage to bring your scenario to reality, would you mind sharing
> what you've done with the rest of us ?
> 
> I havent' moved to v2.x because I tried this exact scenario and stumbled
> upon a load of issues.
> 
> ta,
> 
> s.

Yes, there are problems. By default, Orange does not have DNS, and outgoing 
requests are generally blocked to prevent spamming, but the mailgate will need 
DNS and access to other sites. The full exim system on Debian stable can 
provide the mailgate software, although it warns that it relies on the package 
security updates. IPCop Blue is little used here, so could provide the 
required facilities, and I could block smtp(s) from the mailgate to Red, but 
has anyone succeded in using Orange?
I am sure that it would be possible to use Shorewall to correctly configure a 
suitable firewall, and handle IPv6, but it would be a steep learning curve for 
me, with mistakes possible.
Chris Bell
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user