Chris Guest wrote:

We are changing out our email virus gateway appliance next week and I have a few questions.

 

Our current appliance is setup in “bridge” mode so I did not have to make any kind of server or firewall configuration changes when it was put in.  My mail servers sit behind the gateway appliance on a small switch.

 

The new appliance (Sophos ESxxxx) will actually relay messages to the mail server.

 

From what I’ve sorted out so far, I will need to change my MX record to point to the gateway appliance.

Allow ports 25 and 587 in through my firewall from outside to the gateway appliance and block them from outside to my mail server.

I would think 587 should go to Surgemail.  No one other than a client/user of your surgemail system should be using port 587.  Internet email from other mail servers should come in on port 25 only.

 

When it comes to my Surgemail mail server I’m not quite sure what I need to configure.  Somehow I need to make it point to the gateway so that all messages that originate inside are also forced through the gateway for scanning.

 

Use the Sophos as a smart host for all outgoing email.   I would probably use clamav on surgemail for a free scanner via scavs.pl.  Not sure if avast is free or cost for Surgemail. But using something else is usually a good idea rather than depending on one appliance for all virus scanning.

Lyle Giese
LCR Computer Services, Inc.

Any thoughts or recommendations out there???  What am I missing?

 

---

Thanks,

ChrisG