I have 3 IP addresses assigned to my Internet interface. Off course two of them are virtual. So let say I have 212.1.1.1 which is originaly asigned to firewall for IPSec/VPN, then 212.1.1.2 that is a new one publishing an WEB server using a DNAT rule and 212.1.1.3 which is where my MX record points to. The problem is that I activate the SMTP proxy instead publishing with DNAT rule so the port 25 looks open for the three IP addresses. Off course another SMTP server will enter only using the 212.1.1.3 since the DNS is pointing that as MX record... but a hacker could try to mess with the other two IP addresses.
How can I assign the SMTP proxy to the 212.1.1.3 only????
I thought making some DNAT rules to no place but looks quite dirty solution to me . Any idea?
Exim allows you to specify the address and port to listen on. Remember if you make changes to your firewall using the console it voids your warranty. To make your changes survive reboots and config changes, edit the exim.conf-default file instead of the exim.conf. Remember to make the appropriate packet filter rules.
edit your /var/chroot-smtp/etc/exim.conf-default file and find the line that has the following, if its not there add it. local_interfaces =
make sure after you edit the line it has 127.0.0.1 listed in the interfaces.
for example your public interfaces is 212.1.1.3 and you want to listen only on that address, the line would look like this:
Exim allows you to specify the address and port to listen on. Remember if you make changes to your firewall using the console it voids your warranty. To make your changes survive reboots and config changes, edit the exim.conf-default file instead of the exim.conf. Remember to make the appropriate packet filter rules.
edit your /var/chroot-smtp/etc/exim.conf-default file and find the line that has the following, if its not there add it. local_interfaces =
make sure after you edit the line it has 127.0.0.1 listed in the interfaces.
for example your public interfaces is 212.1.1.3 and you want to listen only on that address, the line would look like this:
. Any idea?