Topology of new installation

[phoenix]

It's not far away but I thought I'd better make it clear that it's not available yet - it's due in the next major release available mid-year.

[grunty]

I still haven't decided whether I should put the Zimbra box inside or outside of the firewall.

What is everyone's preference?

[phoenix]

It should be behind a firewall, there's no reason to have it outside.

[grunty]

That was what I was starting to think.

I was trying to avoid NATing, but I think I'll just have to work out how to do the setup.

The page here looks pretty good (if I decide to use SUSE)...
http://wiki.zimbra.com/index.php?tit...er_9_NAT_HOWTO

[phoenix]

You should also have a look at the split-dns section of the wiki.

[keffa]

I've got three running behind some IPcop firewall/NAT's. I would strongly recommend putting it behind the firewall for two reasons...

1. The LAN clients will have first step access to it, eliminating network bottlenecks and stagger points.

2. While I have no doubt that a properly configured machine with decent passwords and IPtables can stand up for itself out on the big wide web, there is no such thing as too much security. It's obviously a stagger point but one worth having.

Forwarding the ports is not a huge job as depending on how you intend to use Zimbra there is between 1 and 8 ports to forward.

[grunty]

I'll be back next week when I try to setup my server!!

I'm downloading the trial version of SLES 9 (60 day trial) to put it on.