[ILUG] Firewall policy question

[Ivan Griffin]

Hi John,

I don't think you're being paranoid at all.  Blocking internet traffic to 
port 25 is a very good idea if you do not need it to be open.

You could probably create a firewall rule to allow just the relevant 
subnet within ul.ie that you expect to receive email from.

Do the server configurations change all that often?

Best Regards,
Ivan.

On Thu, 10 Apr 2008, John Kinsella wrote:

> Hi
> all my mail comes via several mailservers here in UL so I have set my 
> firewall to block incoming traffic on port 25 except for those specified ip 
> addresses.
>
> Obviously if UL network admin change server config and dont tell me I'll stop 
> getting incoming mail.. :-)
>
> Is this firewall setting unnecessarily paranoid - ie is there a significant 
> vulnerability attached to allowing incoming traffic on port 25 to "everyone"?
>
> Thanks
>
> John
>
> -- 
> John A. Kinsella		Ph: 	+353-61-202148 		(Direct)
> 					+353-61-333644 x 2148  	(Switch)
> Mathematics Dept.		e-mail: John.Kinsella at ul.ie
> University of Limerick		FAX: 	+353-61-334927
> IRELAND				Web:    http://jkcray.maths.ul.ie
>
> -- 
> Irish Linux Users' Group mailing list
> About this list : http://mail.linux.ie/mailman/listinfo/ilug
> Who we are : http://www.linux.ie/
> Where we are : http://www.linux.ie/map/
>
>