+ Post New Thread
Results 1 to 9 of 9
Wireless Networks Thread, Mail server location in Technical; Hope everyone is OK now so close to crimbo. I have been looking into running our own mail server and ...
  1. #1

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56

    Mail server location

    Hope everyone is OK now so close to crimbo.

    I have been looking into running our own mail server and have come a step closer today after looking into some info that Plexor gave me about nominet.

    I have got registration details and have logged in and checked the server registered with them.

    I spoke with the guys where the domain name points to and they say we can route the domain name to our servers.

    Now, thats all great but where do i put the mail server. inside the network or run it in the DMZ?

    At the moment the mail server is also an OD replica and so holds the passwords and stuff although it should be secure.

    What would be the best way to configure this so as it is secure and everyone is happy.

    I would like t to be set up well as Broadband Sandwell host them currently and said that as soon as we join their network then we will need to lose all our services as it will be a security risk. If we can make it secure now then we could possibly keep them in the future.

    Hope you guys can help me.

    Cheers

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,036
    Thank Post
    852
    Thanked 2,663 Times in 2,260 Posts
    Blog Entries
    9
    Rep Power
    766

    Re: Mail server location

    ISA 2006 has some really nice email server publishing wizards that filter out suspicious looking connections and allows you to run a local network server in reasonable comfort and security.

  3. #3

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56

    Re: Mail server location

    we are using an os x mail server as we purchased an xserve to do computer management so wish to utilise the software fully.

    Thanks for the reply though.

  4. #4

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,929
    Thank Post
    1,337
    Thanked 1,779 Times in 1,104 Posts
    Blog Entries
    19
    Rep Power
    594

    Re: Mail server location

    If you are going to use it for computer management then don't put it in the DMZ.

  5. #5

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56

    Re: Mail server location

    I could move the mail service onto the replica (dual 1.8 Ghz G5) and the demote back to a stand alone server. Just means i will have a little more work if anything happens.

    But how would i authenticate back to the main server correctly. I would need to open some pinhole ports in the DMZ and firewall the server itself pretty strongly i would think. This server would also act as the webmail server and possibly host our website.

    I thought about relaying Mail through a dyndns account to our servers at one point.

    This is the point where i start to get a little lost. I know what i want to achieve but lack the knowledge to get the most secure and best implementation.

  6. #6

    webman's Avatar
    Join Date
    Nov 2005
    Location
    North East England
    Posts
    8,401
    Thank Post
    637
    Thanked 961 Times in 661 Posts
    Blog Entries
    2
    Rep Power
    319

    Re: Mail server location

    Ideally, servers that communicate with the outside world should be in the DMZ - should a server be compromised it would only potentially affect other DMZ servers and not mission-critical ones on the LAN.

    Opening up a small number of ports on the firewall into the LAN server (authentication, for example) with strict IP restrictions is a lot better than having an internet server in the LAN with ports forwarded from the internet directly to it.

  7. #7

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56

    Re: Mail server location

    excellent. The sort of information I was looking for. How do you guys do it?

    Is it like webman has said or a different variation

  8. #8

    Join Date
    Sep 2006
    Location
    Essex
    Posts
    777
    Thank Post
    1
    Thanked 31 Times in 29 Posts
    Rep Power
    23

    Re: Mail server location

    Quote Originally Posted by webman
    Ideally, servers that communicate with the outside world should be in the DMZ - should a server be compromised it would only potentially affect other DMZ servers and not mission-critical ones on the LAN.

    Opening up a small number of ports on the firewall into the LAN server (authentication, for example) with strict IP restrictions is a lot better than having an internet server in the LAN with ports forwarded from the internet directly to it.
    With Exchange 2007, the client access roll (OWA OMA VOIP etc..) can sit in a DMZ with a secure connection to the Mailbox server on the LAN.

  9. #9

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56

    Re: Mail server location

    I will be using an OS X mail server. I will look at whether it is possible to split the 2 (webmail and mail Service) to run on separate boxes. I can't see why not. Well not yet anyway.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 18th October 2007, 08:55 AM
  2. Exchange Server Mail Client In Linux
    By FN-GM in forum *nix
    Replies: 6
    Last Post: 16th October 2007, 08:29 PM
  3. Location of DC/File Server?
    By park_bench in forum Wireless Networks
    Replies: 14
    Last Post: 16th August 2007, 09:02 PM
  4. Internal Mail on Exchange Server
    By johnkay21 in forum Windows
    Replies: 6
    Last Post: 15th May 2007, 07:20 PM
  5. Small Scale Mail Server
    By richard in forum How do you do....it?
    Replies: 16
    Last Post: 1st June 2006, 07:20 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •