Block trafic port 25 from outside ???

[UtilisateurFR]

Hello,

I do not manage to cut the access of the local network towards ports 25 from the outside to avoid possible post offices infected by viruses of spam.

I may put any kind of rules in the firewall bur that always passes !

Rule exemple in my FW:
Action = block
Trafic type = TCP & UDP
Source = Internal
Destination = External
Source = Any
Adress = Any
Source port = Any
Destination Port = 25

Thank for your help

[dwasserman]

From outside or To outside?
Your rule must block smtp (not encripted) traffic from your lan to internet

[UtilisateurFR]

From outside or To outside?
Your rule must block smtp (not encripted) traffic from your lan to internet

To Internet

I active this rule but don't work

[dwasserman]

Then your mail client not use port 25 sure.

[UtilisateurFR]

Then your mail client not use port 25 sure.

Yes and i can do a telnet on port 25 to a mail server on internet

[dwasserman]

You are right, can
Change destination from External to Any , now you only block smtp from inside to external interface of untangle

[UtilisateurFR]

You are right, can
Change destination from External to Any , now you only block smtp from inside to external interface of untangle

I change External to any in my rule and test on my client but don't work
It is always possible to connect in spite of the rule

[UtilisateurFR]

I think they are a problem with untangle for blocking the port 25 because for testing I do the same rule with the port 587 and the rule work

[hlarsen]

this works.

[UtilisateurFR]

this works.

The same rule don't work on my UT