View Single Post
  #14 (permalink)  
Old 2007-02-12
nazaraf nazaraf is offline
Junior Member
 
Join Date: 2007-01-15
Posts: 21
Rep Power: 0
nazaraf has an average reputation (10+)
Default Re: Passed CCSA NGX (156.215.1) with 85%

Yeah I agree with no.13,
checking the source domain as only "@mydomain" and destination any (*) - for outbound mails
checking the destination domain as only "@mydomain" and source any (*) - for inbound mails prevent your mailgateway/mailserver from being spam relay.
================================================== ======
How about no.14? Should it be C? Dynamic NAT is same as Hide NAT,
A- Use Hide NAT on the network object in the 10.1.1.0 netwok - Absurd
C- Use Dynamic NAT on network object 10.1.1.0 - better

What do you think?
Reply With Quote