Paul A. Luzzi

September 30, 2010

Well, a bit of a headache to get the connectivity right, but the job is done. The “untangle” server is now in place. Its setup in bridge mode, and takes the firewall’s inside interface, and connects to the outside interface of the untangle box “IPS”. Then the internal side of “IPS” connects to the core switch. Now everything passes through the IPS, and it can catch spam, phishing attacks, virus, and plenty of other good stuff – all before clogging up my email. This should help in many ways – so the testing is now underway.

One thing worth noting about IPS – in the spam area, I chose not to drop the emails at the IPS, but instead mark them as spam and forward them through. That way I can see all the emails IPS is catching in my regular email client’s “junk” folder. So I can tell if its good, or catching any false positives. Assuming its as good as I anticipate, in a month, I’ll change the “mark” option to “drop”, so that they don’t come into Zimbra at all.