proxy and mail server

Hello there,

Using Redhat v 9.0. is there a way to use a Redhat v9.0 machine and setup
a proxy server And a as mailserver ??
If so, which software ?
( I just wnat to force all the users, to go through this machine in order
to go on internet !)
and not everybody using the ADSL connection.. :-)

I didn't find anything for this. Do you know some software doing this?

Thanks for your help

Stephane

Stephane <(E-Mail Removed)> wrote:


> Using Redhat v 9.0. is there a way to use a Redhat v9.0 machine and setup
> a proxy server And a as mailserver ??

Yes, of course.

> If so, which software ?

as a web proxy I would propose Squid, for delivering emails
qmail, postifx or sendmail.

> ( I just wnat to force all the users, to go through this machine in order
> to go on internet !)
> and not everybody using the ADSL connection.. :-)

To achieve this you also need to have the "right" network topology.
One proven topology is to have a packet filter / router with three
NICs. One NIC connecting to the Internet, another one to the
internal net, and the last one connecting to the DMZ net.

In the DMZ your proxy server is located (along with all other
servers directly reachable from the Internet). On the packet
filter you drop all packets from the internal net directly
destined to the Internet and allow only communication to/from
the proxy. Only the proxy is allowed to connect directly to
the Internet.

There are also other topologies like having the proxy server
also in the internal net, or putting the proxy server and
the packet filter on the same box. IMHO those approaches are
not as secure as a properly setup DMZ approach. However sometimes
you can't effort two dedicated boxes and so you take the risk.

Ciao, Horst
--
»When pings go wrong (It hurts me too)« E.Clapton/E.James/P.Tscharn

Thanks for your reply Horst.
I will have a look on these software.

Thanks again

Stephane

On Tue, 20 Jan 2004 01:33:25 +0100, Horst Knobloch wrote:

> Stephane <(E-Mail Removed)> wrote:
>
>
>> Using Redhat v 9.0. is there a way to use a Redhat v9.0 machine and setup
>> a proxy server And a as mailserver ??
>
> Yes, of course.
>
>> If so, which software ?
>
> as a web proxy I would propose Squid, for delivering emails
> qmail, postifx or sendmail.
>
>> ( I just wnat to force all the users, to go through this machine in order
>> to go on internet !)
>> and not everybody using the ADSL connection.. :-)
>
> To achieve this you also need to have the "right" network topology.
> One proven topology is to have a packet filter / router with three
> NICs. One NIC connecting to the Internet, another one to the
> internal net, and the last one connecting to the DMZ net.
>
> In the DMZ your proxy server is located (along with all other
> servers directly reachable from the Internet). On the packet
> filter you drop all packets from the internal net directly
> destined to the Internet and allow only communication to/from
> the proxy. Only the proxy is allowed to connect directly to
> the Internet.
>
> There are also other topologies like having the proxy server
> also in the internal net, or putting the proxy server and
> the packet filter on the same box. IMHO those approaches are
> not as secure as a properly setup DMZ approach. However sometimes
> you can't effort two dedicated boxes and so you take the risk.
>
> Ciao, Horst