[hayabusa]

My firewall team is arguing with me about having port 3101 open for outbound connections to RIM's network while my BES is on the LAN. They are telling me they don't want to do this because they fear someone could spoof srp.us.blackberry.net and we could potentially connect to it. All my other BES servers connect this way but I am using a CLP client that allows them to do this. In the above situation a CLP proxy client is not possible because of the way the company is owned. Does anyone have any other ideals? I was thinking I could put a DMZ in and put the router portion on another domain since this part of the company doesn't have a dmz but this means puting in another server and providing a domain trust since this would be a different domain. Any ideal would be great I'm racking my brain trying to come up with ways to get this running