Topic: Using SME as firewall - using Windows 2000 for SMTP and othe

[MattLok]

Hi There,

I know this is a dumb question and everyone will ask why use Windows 2000 Server's IIS when you can simply use SME Service to do the same job for SMTP.

So my question is how do I tell SME to assign an IP to my SMTP on Windows 2000 Server and open port 25 to allow mail to go out.  The SMTP on Windows 2000 server is strictly used as a SMTP server for users outside the LAN.  If this doesn't make sense, then I'm probably wording this wrong.

So basically I have a SME box acting as a firewall/router connected to a DSL on 1 NIC and another NIC connecting to the hub.  Then I have another box that has Windows 2000 server connected to the hub as well.  So what happens is that an outside user in another country would send mail from his computer using the SMTP server name on Windows 2000 server (which is just an IP address not a domain name.)  Then the mail goes to the SME server, and the SME server has to know to route that mail to the Windows 2000 Server's SMTP.  Then Windows 2000 Server's SMTP sends the mail to the recipient, go back out through the SME server, out to the internet and into the recipients SMTP server at another country, etc.

Can anybody help me?

Thanks,

Matt.

[Kelvin]

Matt,

Given that you want to allow external users to send mail out of the W2K Server, I recommend AGAINST opening port 25 or you might end up with an open mail relay (Really, really bad !).

At best, if you really must setup this way, I would suggest you enable PPTP on the SME server and force your external users to VPN into the network first before sending mail via the W2K server.

There is another way involving the delegate mail server setting and the POP before SMTP contrib but it's more complicated. I'd stick to VPN.

Kelvin.

[Jáder Marasca]

Wouldn´t be a better choice to use another linux distro to be JUST firewall.
Maybe Smoothwall (www.smoothwall.org). I love it!
You appears do not use SME for nothing than a firewall... so use a firewall only solution!

Jáder