Solved

I will be setting up a SMTP GAteway server on the DMZ, can i use a different port

Posted on 2004-08-19
6
164 Views
Last Modified: 2010-04-09
I am going to setup a smtp gateway server on our DMS, should i use a different port to forward the mail inside?  Is that possible? i know sometimes we change port numbers on services to mask what they are and add more security.  I will be using windows 2003 server for the smtp gateway and a windows 2000 server running exchange 2000 as the smart host.

thanks.  this is the first time i will have done this.  We use to just use a 1 to 1 NAT through the firewall and open up SMTP to the server.

0
Comment
Question by:YankeeFan03
  • 3
  • 3
6 Comments
 
LVL 15

Accepted Solution

by:
Yan_west earned 250 total points
ID: 11848312
Yes it is possible, For Exchange 2000\2003, change it in the General Tab of the SMTP Virtual Server. it will ask you for the port you want to use..
0
 

Author Comment

by:YankeeFan03
ID: 11853449
how do i change it on a Windows 2003 server being used as the SMTP Gateway?  I think i have to set the Gateway to forward the email on the same port i change the other one to.  Is that correct?
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 11853502
Yes.. that's it. you have to foward your mail to the port that was changed on the other server. Just have to put port X on the smtp service on the gateway..
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 

Author Comment

by:YankeeFan03
ID: 11854457
thanks Yan west you have been right on.  I see in the IIS manager i can go to the properties of the "default smtp virtual server" and then click the advanced button to change a port.  But, will this affect what port he listens on for incoming email or is that the port that he will use to push the messages to his smart host?  Want to make sure i don't change the wrong thing.  

thanks.
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 11854867
Check in the help for the advanced tab where you can change it.. I'm not sure, I knew it could be done, but I've never done it personnaly.
0
 

Author Comment

by:YankeeFan03
ID: 11877210
i am going to keep the port 25 for SMTP.  I have another question.  

So i have my SMTP gateway server on the DMZ, with a rule that allows 25 traffic in to the DMZ.  I then have the SMTP server pointing to a smart host on the inside network which is my exchange server.  I only have one NIC.  I am going to assign that NIC a public DMZ address and set the gateway to the firewall.  I will then setup another rule allowing the traffic in from the firewall DMZ to the lan.  Will the firewall be able to route the smtp traffice back into the LAN?  it is a sonicwall 3060.  Or do i need to set the server with 2 NICS?  How does that work?  Two NICS does not make sense to me.  I am assuing the firewall can route the traffic back into the LAN.

0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
This video discusses moving either the default database or any database to a new volume.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now