MX Exchange with Enidan Firewall

[smartcard]

I am trying to use Endian Firewall to have the ETM gateway. I need to understand if there are any particualr setting that I need to do in my Exchange server if I am using Endian FW?

My domain MX is points to my server.

[YeOldeStonecat]

You'll want to have your SMTP traffic go through it....what is your current firewall/WAN setup?

You can either have the Endian box as your main router...if if you have another router you need to keep as your primary..stick the red interface of the Endian box so SMTP traffic flows through it..either IP mapping a public IP to it if you have a block of IPs...or port forward 25 to it. Have Exchange answer on the green NIC.

By default from my experience it does about 40-50% SPAM removal just on default settings. There's a LOT to configure in the spam settings..subscribing to lists, etc.

[smartcard]

I don't have a separate firewall so I am going to use the Endian as my firewall. I have not yet configured my setup with Endian, but doing some experiments to find a good solution.

I have block of IP's from ISP, so is it advisable to map one of it to the RED?

Is there any setup required in Exchange?

[YeOldeStonecat]

It's a great firewall..pretty much my favorite linux distro firewall....a lot of good features for a business. It's like IPCop with the Copfilter add-on..but in a nice streamlined package.

Since it's your primary firewall also..IMO no need to utilize the other 4x IPs from your block...I'd probably try to do it all on 1x IP..although we have done some funky setups utilizing all 5...just for the sake of seeing how creative we could be. :wth:

The neat thing about Endian with its "transparent proxy" features...is you don't have to configure software (such as web browsers, e-mail clients, or mail servers) to get the features. Since all the traffic is going through the Endian box just like it was a regular router...when you "enable" those transparent proxy features on the interfaces within the web admin of Endian...that's it! It's doing its job...scrubbing for viruses with ClamAV, scrubbing for SPAM with SpamAssasin and whatever else you flipped on, and scrubbing for malware with (I forget what they added in the latest feature which protects against malware)

[smartcard]

You are correct, looking at the community version I can see its a total ETM (Enterprise Threat Management) with a neat web interface.

However, I assume enabling the transparent proxy the content management feature will not work.

Also, I noticed that there is not much active users to discuss in another forum?