topic Setting up Gateway as MTA to forward Inbound mail in Firewall and Security Management

Setting up Gateway as MTA to forward Inbound mail

carl_t — Wed, 15 Sep 2021 13:06:30 GMT

Hi Guys

I need to set up my Gateway running R80.20, so we can forward a copy of journald mails from MS365 to an Internal server running SMTP.

As all the mails are scanned on the outside I just want to do simple forwarding with just some threat prevention/IPS.

For this do I just enable the MTA on the Gateway and create a rule allowing the mail on port 25 to the Gateway ?

Will this have any impact to the load on the Gateway and cause any excessive cpu/memory usage, or will it be fine?

What benefits does this give me over doing a simple NAT to the mail server on the inside?

Cheers

Re: Setting up Gateway as MTA to forward Inbound mail

PhoneBoy — Wed, 15 Sep 2021 15:57:36 GMT

If TLS is required, it will give you the ability to actually do Threat Prevention on said emails.
Otherwise, you're just seeing encrypted traffic.
Generally the impact should be small, but it probably depends on the volume of traffic.

Re: Setting up Gateway as MTA to forward Inbound mail

Chris_Atkinson — Wed, 15 Sep 2021 23:18:05 GMT

For reference please see the MTA document and applicable SKs:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ThreatPrevention_AdminGuide/Topics-TPG/Mail_Transfer_Agent.htm?tocpath=Mail%20Transfer%20Agent%7C_____0#Mail_Transfer_Agent