This a question from my homework assignment.
There is a company with two sites A and B.
B is behind DMZ (firewall - proxy mail server - firewall) and A is just behind a firewall
Network A - Firewall - Internet - Firewall - proxy mail server - Firewall - Network B
The firewall is a stateless packet filtering firewall that allows the communication:
the question is about the possibility of conducting a MitM attack through the mail server.
Now my question:
Doesn't the mail server communication have to be verified with the server's certificate? Is it possible to do a MitM attack in that kind of network? how?