Koozali.org: home of the SME Server

Obsolete Releases => SME Server 9.x => Topic started by: brianr on November 18, 2019, 01:54:04 PM

Title: How to get SMEServer to reject all email on port 25
Post by: brianr on November 18, 2019, 01:54:04 PM

We are migrating one of my servers to cloud based email, and while the MX record changes gets round the internet we want to force the SMEServer to reject all mail.

How to do it?

edit - Took out mention of port 465  - realised that is a red herring.

Title: Re: How to get SMEServer to reject all email on port 25
Post by: ReetP on November 18, 2019, 07:36:03 PM

Quote from: brianr on November 18, 2019, 01:54:04 PM

We are migrating one of my servers to cloud based email,

Yuck :-( I just run SME in the cloudy sky thing ;-)

Quote

and while the MX record changes gets round the internet we want to force the SMEServer to reject all mail.

How to do it?

edit - Took out mention of port 465  - realised that is a red herring.

You can stop that as well.

ssmtpd=service
    Authentication=enabled
    Instances=10
    TCPPort=465
    access=public
    status=enabled


You need to stop 25 which I guess is:

smtpd=servicesmtpd=service
    Authentication=enabled
    Instances=40
    InstancesPerIP=5
    MaximumDateOffset=0
    PatternsScan=disabled
    Proxy=blocked
    TCPPort=25
    TCPProxyPort=25
    VirusScan=enabled
    access=public
    status=enabled
    tnef2mime=enabled

I guess set them both to private & disabled and signal-event email-update

Title: Re: How to get SMEServer to reject all email on port 25
Post by: janet on November 19, 2019, 12:37:18 AM

ReetP, Brian

Quote

I guess set them both to private & disabled and signal-event email-update

After making those db changes,
I think you will need to manually stop those services or achieve the same with a reboot

Title: Re: How to get SMEServer to reject all email on port 25
Post by: ReetP on November 19, 2019, 12:41:13 AM

Yes you are probably right.

I think setting private/disabling them will ditch the ports in the firewall too which will prevent access.

Title: Re: How to get SMEServer to reject all email on port 25
Post by: brianr on November 19, 2019, 10:15:05 AM

Thanks everyone for the information.  Actually the MX record changes got round very quickly so there was not a need for lots of syncing, however the server will be in use for another week or two to provide the shared sdata until that gets loaded into the cloud so I'll definitely follow the instructions.

Its all part of achieving my (second) retirement!