This a question from my homework assignment.

There is a company with two sites A and B.
B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall
Network A - Firewall - Internet - Firewall - proxy mail server - Firewall - Network B

The firewall is a stateless packet filtering firewall that allows the communication:


the question is about the possibility of conducting a MitM attack through the mail server.

Now my question:
Doesn't the mail server communication have to be verified with the server's certificate? Is it possible to do a MitM attack in that kind of network? how?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.