Link to home
Start Free TrialLog in
Avatar of elschott
elschott

asked on

Configure Firewall to block smtp access to server on internal network

Hello I noticed I have a security flaw in my system whereby if I am located internally of the network and telnet to my mail server I can create an email message and send it without authenticating, thereby allowing users to create a bogus senders address and spam valid senders within our environment. I was looking at potential ways of preventing this from happening. One thought was to to create a lan to lan firewall rule allowing access on port 25 only on the email server, so deny all others lan to lan traffic on port 25 just wasn't sure if I would be impacting on other areas working effectively. for example my proxy server emails out when it has an issue etc. so might need to restrict it to all servers, unless someone else can offer some alternative suggestions to prevent this behaviour. My email system is groupwise 8 and I have a cyberoam firewall.
SOLUTION
Avatar of John Meggers
John Meggers
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of elschott
elschott

ASKER

not the slam dunk I had hoped for but useful none the less thanks