Re: Passed CCSA NGX (156.215.1) with 85% Yeah I agree with no.13, checking the source domain as only "@mydomain" and destination any (*) - for outbound mails checking the destination domain as only "@mydomain" and source any (*) - for inbound mails prevent your mailgateway/mailserver from being spam relay. ================================================== ====== How about no.14? Should it be C? Dynamic NAT is same as Hide NAT, A- Use Hide NAT on the network object in the 10.1.1.0 netwok - Absurd C- Use Dynamic NAT on network object 10.1.1.0 - better What do you think? |