You may want to look into products that support SMTP authentication to
send mail to remote hosts.  Of course that wouldn't protect any of your
users from getting SPAM and stuff.

I've been looking into various products that support SMTP authentication
and have several friends that use Exim (http://www.exim.org).  I haven't
used Lotus Notes/Mail in so long I can't remember what security
functionality it has.

One last method is called 'POP before SMTP' where the user would POP
with their password which would be seen by the SMTP service allowing the
user to relay.  I haven't read a lot on this one because I didn't like
the idea of the user getting errors sending SMTP mail prior to sending a
POP request.

Anyway, there are solutions out there.  I'd recommend looking into Exim
as a good start.

David Ishmael
Sr. Engineer - Windward Consulting

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Navin
Mehra/MUM/IN/STTL
Sent: Sunday, March 24, 2002 11:56 PM
To: [EMAIL PROTECTED]
Subject: Restrict telnet to port 25 via firewall.

Hi,

I have a Lotus Notes mail server behind my Pix firewall 5.3(1), the
problem
is anyone from outside is able to telnet my smtp port 25 and compose a
mail
and send it. The issue is though my mail server restricts free relay
he/she
can compose a mail via telnet to port 25 in name of anyone else in the
same
domain and send a false mail on his behalf.
So is there anyway where by I can block the telnet to port 25 and
thereby
stop the composition of a mail. Is there a way to authorise/restrict
access
the telnet to service ports.
Requesting assistance

Regards
Navin Mehra
Softcell Technologies
Ph. 460 6969 Extn. 220

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls



_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to