Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: swatts on August 27, 2004, 01:00:09 PM

Title: outbound spam/virus emails
Post by: swatts on August 27, 2004, 01:00:09 PM
As SME server is configured as a transparant smtp proxy, all outbound emails will go through qmail and the associated spam/virus checking...

I would like to instead have all emails that are aimed at any 3rd party smtp server (ie. not my SME box) to be quarantined :hammer: and logged and/or an alert sent to admin.  Is this possible, and if so how?

Thanks in advance.
Title: outbound spam/virus emails
Post by: cc_skavenger on August 27, 2004, 01:03:43 PM
not sure about the second part, but if you turn off transparent smtp proxy, mail being sent out another smtp server will not be sent.

turn off transparent smtp proxy:
/sbin/e-smith/config setprop smtpfront-qmail Proxy disabled
/sbin/e-smith/signal-event remoteaccess-update

HTH
Title: outbound spam/virus emails
Post by: swatts on August 27, 2004, 07:46:37 PM
Quote from: "cc_skavenger"
turn off transparent smtp proxy:
/sbin/e-smith/config setprop smtpfront-qmail Proxy disabled
/sbin/e-smith/signal-event remoteaccess-update

HTH


Thanks, but that would allow any virus/spam trojan with it's own smtp server to send out unimpeded.  

How would I set up iptables to allow connections to SME on port 25 but reject/drop and log relaying smtp traffic?

That would be a stop-gap solution but an application level solution might be better as one can save the emails themselves.

swatts
Title: outbound spam/virus emails
Post by: bigbri100 on August 27, 2004, 11:18:28 PM
Quote
Thanks, but that would allow any virus/spam trojan with it's own smtp server to send out unimpeded.


If you turn off the Transparent Proxy then all other SMTP servers on your LAN will be denied.
Title: outbound spam/virus emails
Post by: swatts on August 28, 2004, 07:08:19 AM
Quote from: "bigbri100"
If you turn off the Transparent Proxy then all other SMTP servers on your LAN will be denied.


Sorry, but this is wrong.  Turning it off gives free access to the internet for any smtp server.