Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Henrik Hansen on October 08, 2003, 06:37:05 PM

Title: SMTP bouncing for selected IP addresses only
Post by: Henrik Hansen on October 08, 2003, 06:37:05 PM

Hi

I'm trying to setup an sme server 6 beta 3, wich is going to function as an mail bouncer for 2 other companies.

So...what i hope someone will be able to help me with is:

Block all port 25 (smtp) traffic EXCEPT when port 25 traffic comes from the 2 mentioned companies.

Best regards

Henrik

Title: Re: SMTP bouncing for selected IP addresses only
Post by: Byte on October 08, 2003, 07:29:26 PM

You will need to look into IPTABLES the someone who can help you is google, these forums and reading books. ;-)

IPTABLES has many options, so your best bet is to try it out

Byte

Title: Re: SMTP bouncing for selected IP addresses only
Post by: Michael Smith on October 09, 2003, 02:30:53 AM

You might try searching the forums for "secure smtp" or "ssmtp".  Authenticating your inbound SMTP traffic for relay will do what you want.

Title: Re: SMTP bouncing for selected IP addresses only
Post by: Michael Smith on October 09, 2003, 02:32:05 AM

Although I might be misunderstanding you ... I assumed by "bounce" you actually meant "relay."  When I think "bounce" I mean "return as undeliverable", however, and I think the latter sense is the most commonly used.

Title: Re: SMTP bouncing for selected IP addresses only
Post by: Henrik Hansen on October 09, 2003, 11:26:07 AM

Yes sir i am aware of that but i am to occupied at the moment, so if some could please post the three lines needed it would be much appreciated !

Something like
Block all tcp port 25
allow port 25 from xxx.xxx.xxx.xxx
allow port 25 from yyy.yyy.yyy.yyy

Thanks in advance

Best regards

Henrik

Title: Re: SMTP bouncing for selected IP addresses only
Post by: Henrik Hansen on October 09, 2003, 11:27:34 AM

I was here repluing the post from Byte and referring to the 3 iptables statements i will need in /etc/rc.d/rc.local