PMDF System Manager's Guide
PMDF-REF-6.0

Contents (Chapter 29)

• 29.1 What is an e-mail firewall
  • 29.1.1 The e-mail firewall orientation
• 29.2 Preliminary tasks before setting up an e-mail firewall
  • 29.2.1 Have an Internet firewall in place
  • 29.2.2 Security and e-mail policies
• 29.3 The PMDF firewall configuration utility
• 29.4 Firewall configuration features
  • 29.4.1 Separating message traffic
    • 29.4.1.1 Separating SMTP over TCP/IP message traffic
      • 29.4.1.1.1 Sample configuration with separate TCP/IP channels
    • 29.4.1.2 The case of an internal mailhub
      • 29.4.1.2.1 Sample configuration with an internal mailhub system
  • 29.4.2 Postmaster messages
  • 29.4.3 Logging and tracking messages and connections
    • 29.4.3.1 Identifying the source of incoming SMTP messages
    • 29.4.3.2 Logging messages passing through PMDF
      • 29.4.3.2.1 Extra logging detail
    • 29.4.3.3 Snapshots of message traffic through PMDF
    • 29.4.3.4 Monitoring TCP/IP connections to the Dispatcher
  • 29.4.4 Controlling address rewriting and controlling message pathways
    • 29.4.4.1 Sample configuration controlling internal domain rewriting
  • 29.4.5 Controlling e-mail access
    • 29.4.5.1 Staticly controlling e-mail access
    • 29.4.5.2 Sidelining messages for manual inspection
    • 29.4.5.3 Dynamically controlling e-mail access, and defending against denial of service attacks
  • 29.4.6 Controlling external stimulation of message delivery
  • 29.4.7 Controlling e-mail content and message priority
    • 29.4.7.1 Imposing message size limits
    • 29.4.7.2 Message priority and size limits
    • 29.4.7.3 Imposing message sensitivity limits
    • 29.4.7.4 Filtering based on message headers
    • 29.4.7.5 Checking or filtering message content
    • 29.4.7.6 Verifying message integrity
  • 29.4.8 Restricting or controlling information emitted
    • 29.4.8.1 Restricting access to PMDF information via the PMDF HTTP server
    • 29.4.8.2 SMTP probe commands
    • 29.4.8.3 Internal names in Received: headers
    • 29.4.8.4 Centralized naming and internal addresses
• 29.5 Other features and techniques that may impact an e-mail firewall
  • 29.5.1 General performance issues on an e-mail firewall
  • 29.5.2 Additional channel keywords
  • 29.5.3 Rightslist identifiers and group ids
  • 29.5.4 PMDF options