Is Virus Blocker Lite still useful?

[powdermnky007]

Thank you, I'll go start reading up on that.

[jcoehoorn]

I would just bypass port 25 traffic.

Or you could go the other way, and block the port completely.

Literally NOTHING should be using unencrypted SMTP over the internet anymore. It's all ports 465 or 587 now. Anything on 25 is bad news. Port 25 is blocked on my network, and no one has complained about it in years. In fact, it's the only port here right now that's blocked outright for outbound.

[sky-knight]

TCP 25 is still the primary connection point to an email server. If you're hosting one yourself, most traffic is there.

But I agree, authenticated sessions have no place on it. And as much as is possible, TCP 25 even is happening with TLS now.

[powdermnky007]

Already doing both of those suggestions. I have outbound port 25 blocked for all IPs on the network except for the email server.

[sky-knight]

Already doing both of those suggestions. I have outbound port 25 blocked for all IPs on the network except for the email server.

On behalf of the rest of the Internet that will see that much less spam, I thank you.

[powdermnky007]

<meme>It ain't much, but it's honest work.</meme>