The default filter goes something like:
#DEFAULT EMAIL PROXY: Allow connections to email proxy.
Accept EXT TCP
from "ANY_IP"
to "ANY_IP" 25
So if your filter doesn't open any ports other than 25
then you're golden.
-----Original Message-----
From: owner-gb-users_at_gta_dot_com [mailto:owner-gb-users_at_gta_dot_com]On Behalf Of
Marc Suxdorf
Sent: Friday, March 24, 2000 9:44 AM
To: gb-users_at_gta_dot_com
Subject: WG: Email Proxy doesn't answer
Send postings to: gb-users_at_gta_dot_com
Access the list archives at:
http://www.gnatbox.com/gb-users/
----------------------------------
Great, that's it. I had to create a filter!
Well, I thought, because the email proxy is a build in Gnat-Box function, it
would sit in front of the filters.
My first filter now is the email proxy filter which accepts all tcp
connections on all interfaces on all ports with a destination of the
Gnat-Box external interface IP on port 25
I hope this is safe and doesn't leave room for any sort of attack?
Thanks for the help
Marc
PS: Michael, did you read my other question concerning logging the amount of
data transmitted per workstation? That's something I really have to sort out
urgently.
Send postings to: gb-users_at_gta_dot_com Access the list archives at:
http://www.gnatbox.com/gb-users/
----------------------------------
Looking over your note again, I didn't see any mention of either defaulting
the filters or creating a filter for the email proxy.
If you don't already have one, you need to have a filter to accept TCP port
25 on the GNAT Box EXT address.
----------------------------------------------
To Unsubscribe: send mail to majordomo_at_gta_dot_com
with "unsubscribe gb-users your_email_address
in the body of the message
----------------------------------------------
To Unsubscribe: send mail to majordomo_at_gta_dot_com
with "unsubscribe gb-users your_email_address
in the body of the message
|