Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Daniel L. Miller (dmilleramfes.com)
Date: Tue Jul 17 2007 - 14:58:06 CDT
My current setup has a Postfix incarnation on my firewall server, and a
second Postfix on my main internal server. The internal server is
significantly overbuilt for its current load (which I pride myself on).
My question is, what concerns should I have on relocating my external
MTA service to the internal server? I have in mind using NAT from the
firewall to reach the same dedicated Postfix, albeit on the internal
server, for Internet relay services and continue to pass information to
and from the Intranet's Postfix.
The question arises primarily not from Postfix, which barely touches the
system, but the various spam/virus blockers in place are far more
resource intensive and the traffic is picking up. It seems reasonable
to use a software approach to take advantage of the available hardware -
but I don't know if there's any security holes I need to be concerned
about with this.