0

Context:
This a question from my homework assignment.

There is a company with two sites A and B.
B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall
Network A - Firewall - Internet - Firewall - proxy mail server - Firewall - Network B

The firewall is a stateless packet filtering firewall that allows the communication:

<picture>

the question is about the possibility of conducting a MitM attack through the mail server.

Now my question:
Doesn't the mail server communication have to be verified with the server's certificate? Is it possible to do a MitM attack in that kind of network? how?

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.