Re: [FW1] SMTP Security Server

[sirving@ca.ibm.com]

Surround the entires with {}'s.  like {*@company1.com,*@business1.com}.  Of
course this only works with 4.0 and not 3.0.  As far as there "being something
cleaner" try putting in a real mail server on the outside with proper anti-relay
compability.  I do not like checkpoints implementation since it still lacks
smarts.


Jason Harkins <jason.harkins@autoweb.com> on 09/07/99 01:29:27 PM

Please respond to Jason Harkins <jason.harkins@autoweb.com>

To:   "Firewall Shit (E-mail)" <fw-1-mailinglist@lists.us.checkpoint.com>
cc:
Subject:  [FW1] SMTP Security Server





Greetings all...

I have a question regarding the setup of the SMTP security server.  I'm
doing NAT w/ my mailserver.  My MX Record points to my firewall and it
spools the mail and passes it into my internal mailserver.  I want to
tighten my policy down so that only mail with a destination address that I
specify will be able to pass through the firewall.  When I edit the resource
to add this restriction, I know that I need to add it to the "Match tab"
under the "Recipient"  field, correct?  Well, my question is that I want to
put in multiple addresses.  Wildcards won't work for me here because I have
different domain names that I want to support (i.e. *@company1.com and
*@business1.com).  Reading the manual it says you can add multiple entries
in this field separated by commas.  Well, when I do that my mail bounces.
If I have only one entry in the field it works.  So I had to create 3
resources for the 3 domain names I want.  This works, but is kinda messy.
Is this the only way to accomplish this, or is there something cleaner?  Any
advice, comments welcomed....

Thanks,
Jason



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================