Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 316 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Don't want nets like 210.0.0.0/8 to reach SMTPprox

Walter Kitzinger
One of my customers has been under a SMTP dictionary attack (up to 3000 connections/sec). I want to filter out certain nets like 210.0.0.0/8. SMTP proxy seems to ignore packet filter rules. Any hints?

/Walter


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to SecApp
    Autotically generated packetfilterrule have precedence to user defined packet filter rules. This is the reason why you can not block port 25 manually.
    There is also an other trick which can be used without touching the console. It's a litte bit dirty but should work.
    Define the net you would like to block. Then make a DNAT which forwards all traffic comming from the defined network, destined for the external interface of ASL, to a server which blocks port 25 (or just use a non existing destination).

    Xeno
Cookie Information Banner