I have an application that talks with a database in the DMZ. There is a firewall between the apps and the db but our developer thought that they require a mail notification that is triggered from the database through some specific SQL stored requests. I hate it.
And now, it is required to have the db to have a direct access to the SMTP server which is really on the RED zone (needless to say that it is not secure). I would like to ask some hints regarding the best practice and architecture on this.