Koozali.org: home of the SME Server

outbound spam/virus emails

swatts

outbound spam/virus emails
« on: August 27, 2004, 01:00:09 PM »
As SME server is configured as a transparant smtp proxy, all outbound emails will go through qmail and the associated spam/virus checking...

I would like to instead have all emails that are aimed at any 3rd party smtp server (ie. not my SME box) to be quarantined :hammer: and logged and/or an alert sent to admin.  Is this possible, and if so how?

Thanks in advance.

cc_skavenger

outbound spam/virus emails
« Reply #1 on: August 27, 2004, 01:03:43 PM »
not sure about the second part, but if you turn off transparent smtp proxy, mail being sent out another smtp server will not be sent.

turn off transparent smtp proxy:
/sbin/e-smith/config setprop smtpfront-qmail Proxy disabled
/sbin/e-smith/signal-event remoteaccess-update


HTH

swatts

outbound spam/virus emails
« Reply #2 on: August 27, 2004, 07:46:37 PM »
Quote from: "cc_skavenger"
turn off transparent smtp proxy:
/sbin/e-smith/config setprop smtpfront-qmail Proxy disabled
/sbin/e-smith/signal-event remoteaccess-update


HTH


Thanks, but that would allow any virus/spam trojan with it's own smtp server to send out unimpeded.  

How would I set up iptables to allow connections to SME on port 25 but reject/drop and log relaying smtp traffic?

That would be a stop-gap solution but an application level solution might be better as one can save the emails themselves.

swatts

bigbri100

outbound spam/virus emails
« Reply #3 on: August 27, 2004, 11:18:28 PM »
Quote
Thanks, but that would allow any virus/spam trojan with it's own smtp server to send out unimpeded.


If you turn off the Transparent Proxy then all other SMTP servers on your LAN will be denied.

swatts

outbound spam/virus emails
« Reply #4 on: August 28, 2004, 07:08:19 AM »
Quote from: "bigbri100"
If you turn off the Transparent Proxy then all other SMTP servers on your LAN will be denied.


Sorry, but this is wrong.  Turning it off gives free access to the internet for any smtp server.