Koozali.org: home of the SME Server

block SMTP from external

Offline nadia678

  • **
  • 27
  • +0/-0
block SMTP from external
« on: May 25, 2010, 04:45:55 PM »
How do I block port 25 from being used from the external card? i want the users to be able to send mail from the internal card and ussers to use webmail from the outside but no port 25 access from outside.

the server is in server gateway mode......

help please  :grin:

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: block SMTP from external
« Reply #1 on: May 25, 2010, 05:27:59 PM »
nadia678

Please read the manuals, your experience using SME server will be greatly enhanced. See Chp 13 Email for the answer, the setting is done using server manager.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: block SMTP from external
« Reply #2 on: May 25, 2010, 06:49:47 PM »
See Chp 13 Email for the answer, the setting is done using server manager.

I don't see anything there about controlling SMTP access, nor am I aware of any code which does that in the server-manager.

I think that this will disable external SMTP:

config setprop smtpd access private
config setprop ssmtpd access private
signal-event email-update

However, that said, I don't know how you expect your users to receive any email, if you block port 25 from the outside - that is how email is normally delivered.

Offline janet

  • *****
  • 4,812
  • +0/-0
Re: block SMTP from external
« Reply #3 on: May 26, 2010, 12:29:25 AM »
nadia678 & Charlie

I was referring to the Email panel in server manager where access can be set for POP, IMAP & Webmail.
I was not strictly answering the question of blocking port 25 as I assumed that was not really what nadia678 wanted to do.
The question as posed, was somewhat contradictory.
The question I answered was really just the part that said...
Quote
...I want the users to be able to send mail from the internal card and users to use webmail from the outside...

So the practical answer to achieve that without disabling the email system (smtp and/or port 25), is not to block port 25, but to disable POP & IMAP (ie Allow access only from local networks) and enable webmail (ie Allow HTTPS (secure)), which can be done in server manager.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline nadia678

  • **
  • 27
  • +0/-0
Re: block SMTP from external
« Reply #4 on: May 27, 2010, 09:33:43 AM »
Hi Charlie,

We have a problem where somebody is bombarding us with mail and i think they are sending it to the qpsmtp posing as a local domain user. Ive tested the server and its not coming from the inside (worm) its definitely coming from the outside. i need some help or advice to stop it

Offline nadia678

  • **
  • 27
  • +0/-0
Re: block SMTP from external
« Reply #5 on: May 27, 2010, 09:59:48 AM »
update..
I solved it by activating:

config setprop qpsmtpd DNSBL enabled

signal-event email-update

svc -t /service/qpsmtpd

i was being spammed  :-x
« Last Edit: May 27, 2010, 11:00:46 AM by nadia678 »