PIX firewall

[a.elsherif]

Dear All

It is my first time to use this connection, so i hope to find helpful guys.

Actually i need to how to perform or either if these points are supported or not.

1. Mail Guard: removes need for external mail relay server in perimeter network

2. DNS guard: transparently protects outbound name and address lookups

3. Net aliasing transparently merges overlapping networks with the same ip address space.

4. Ability to customize protocol port numbers

[ovt]

1. - ok, but only SMTP is supported (not ESMTP), so DSNs (Delivery Status

Notifications) do not work.

2. - ok, only the first DNS replay packet is accepted.

3. - ok, use 6.2

4. - ok, but not in every place. For example, Cut-thru proxy doesn't recognise

3128 as http.

Oleg Tipisov,

REDCENTER,

Moscow