Re: quick FW question [SOLVED]

From: Tim Aslat (tim_at_spyderweb.com.au)
Date: 05/12/04

  • Next message: Tim Aslat: "Re: quick FW question [SOLVED]" 
    Date: Wed, 12 May 2004 13:57:08 +0930
To: freebsd-security@freebsd.org

    Problem solved.

    Here's the answer (for the archives)

    # block all SMTP traffic from inside to out while letting the server
    # through
    ipfw add allow tcp from any to me 25
    ipfw add allow tcp from me to any 25
    ipfw add deny tcp from any to any dst-port 25

    This prevents any host within the network from sending directly to an
    SMTP server outside the network.

    Thanks to "D J Hawkey Jr <hawkeyd@visi.com>" for helping me out with
    this.

    Cheers

    Tim 

    -- 
Tim Aslat <tim@spyderweb.com.au>
Spyderweb Consulting
http://www.spyderweb.com.au
Phone: +61 0401088479
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
  • Next message: Tim Aslat: "Re: quick FW question [SOLVED]"

    Relevant Pages

    • ISA 2004 Publishing Rules
      ... ISA2004 isolates several secure domain servers from the rest of our network. ... We use two ports for our application: TCP 1240 and TCP 1188. ... I created two server publishing rules, ... traffic, denied connection, default rule, source net external, dest net ...
      (microsoft.public.isa.publishing)
    • RE: [Full-Disclosure] TCP port 25 traffic?
      ... I'm not running a mail server anywhere on my network. ... TCP port 25 traffic? ...
      (Full-Disclosure)
    • Re: how to get IPFW rules for SMTP server behind NAT server "right"? (freebsd-security: me
      ... David, ... ipfw add 7001 allow tcp from any to $25 established ... sometimes i want to be able to use a local LAN mail client to directly access on offsite SMTP server. ...
      (FreeBSD-Security)
    • Re: Diskless client problems
      ... I have fixed the problems with all the error messages, The server was ... network is now flying. ... I still know why it is not using tcp, but this is not so important now. ... >> When running NFS over a wireless link for example, ...
      (Debian-User)
    • Re: Short guide to secure network
      ... UPD is required and what needs to be opened on the server and what needs to ... be opened on the client. ... > I am going to secure my network with tcp/ip and ICF on all my computers. ... > Is there a short guide to the basic ports, both TCP and UDP to keep open. ...
      (microsoft.public.windows.server.security)