ConfigServer Security & Firewall

[fuse]

Anyone has tested this solution with Zimbra 6.x servers?
ConfigServer Security & Firewall

Regards,

[phoenix]

It's not recommended to install a firewall on the Zimbra server itself but you can install one in-front of the server.

[HidX]

But if the server is on the Internet, a firewall is needed.
Iptables can be configured quite competently.

csf - This is a web interface to iptables?

[fuse]

Yes i know, i actually have a firewall appliance before the server any suggestions for configuring iptables in ubuntu systems?
I have seen a demo in the wiki but it was for red hat based systems.

Regards,

[HidX]

You need a ready-config?

[fuse]

Yes some ready to go configs for beginners like the one in the wiki but for ubuntu systems.
Firewall Configuration - Zimbra :: Wiki

Thanks for your help.

[HidX]

Originally Posted by fuse

Yes some ready to go configs for beginners like the one in the wiki but for ubuntu systems.
Firewall Configuration - Zimbra :: Wiki

Thanks for your help.

Well actually, the main thing to know what ports need Zimbra.
And then create a config for iptables is not so difficult.

Write me at P.M. I'll give you some links.

[fuse]

Hi, i know witch ports i need by the wiki information, i will try to make some rules based in the redhat example.

Thanks

[phoenix]

Originally Posted by HidX

But if the server is on the Internet, a firewall is needed.

You will note in my earlier post I didn't say 'no firewall' I said the firewall should not be installed on the Zimbra server. Surely best practice would involve installing a dedicated firewall server and having your mail server behind that and not on the same box as the firewall, would it not?

[fuse]

Yes agree, but im pretty sure if iptables was proper configured it will be a good solution.

Regards,
M