Also useful to protect your perimeter is an IDS or Intrusion Detection System. The obvious choice here in the Open Source world is the Snort IDS. Snort is powerful and compares very favorably with most commercial offerings in this space. It is also capable of running on older and cheap hardware –- again saving you money on the need to purchase expensive sensors or probes and the associated software.
Moving further into our network we may have an e-mail system. Choosing an appropriate e-mail system can be tricky and controversial. A lot of Usenet posts and mailing lists get clogged when the debate about which e-mail system is best starts. Personally I am a fan of Postfix, which I have found easy to install, manage and secure. Other people swear by products such as Qmail or Exim and still others believe the venerable Sendmail package still has significant legs.
Added onto your e-mail system you will need to further secure this with anti-virus and anti-spam technology. Some of the open source products here include ClamAV for anti-virus and tools such as SpamAssassin, DSPAM and Bogofilter for anti-spam.
Hope this helps!
This was first published in September 2005