Before setting up an e-mail firewall, you should have an Internet firewall in place to control what sorts of general TCP/IP access are permitted to your systems, and you should consider and establish general security and e-mail messaging policies appropriate for your site.