Hello all,
I recently implemented a new PF firewall, and everything went well with no real problems. Internet access is up, and everything is generally working as intended. I do need to do more work however for further functionality.
This particular environment makes use of a locally hosted mail server, on the WAN IP address. What are my best options for allowing mail in/out while maintaining best security practices? I was able to receive mail with a firewall rule, but I believe outgoing will need more (or at least, another rule). The mail server is currently behind the firewall (a VM).
I don't want to allow any more than I need to. For argument / rule creations sake, we'll say the WAN IP is on 1.2.3.4, and the exchange server is on 192.168.1.2 LAN. I'm not greatly experienced with networking, so any help is appreciated. If there are...