Solved

How to stop users getting mail via VPN Urgent 500 points

Posted on 2006-11-15
2
144 Views
Last Modified: 2010-03-18
London                          Firewall                         Firewall                      Aberdeen
192.168.1.1                   192.168.1.10                 192.168.10                  192.168.0.2
                                                           VPN
                                                                                                           Mail Server



I have the following set up for certain reasons and it cant change.

How do i stop desktop users from London obtain there mail  via Outlook?
I have blocked port 80 on the London side firwall. THis dosnt work as the VPNs route the mail internally.
I cant uninstall Oultlook not an option.

How do i stop them RX mail.

The reason for this the users in london use citrix and collect there mail from citrix.

As all users some have fiddled and found the route via the vpn to collect mail with out citrix. Causing my Bandwidth loss.

Thanks
0
Comment
Question by:ellandrd
2 Comments
 
LVL 14

Accepted Solution

by:
inbarasan earned 250 total points
ID: 17946144
Dear ellandrd,
Block the Mail server access when they try to come in via VPN. Port 80 is for Outlook web access. This is not used when you use outlook. Better block whole IP.

Cheers!
0
 
LVL 21

Assisted Solution

by:mcsween
mcsween earned 250 total points
ID: 17947526
On your (Aberdeen) firewall create a rule that blocks all traffic on all ports from the 192.168.1.0 subnet to your mail server's IP.  Depending on what your Firewalls are you should be able to select VPN as the interface instead of WAN.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now