Tried disabling rules with SMTP Resource, then FW rejects all SMTP traffic with rule 0 ... Interface SMTP transparent proxy Action Reject Rule 0 - Implied Rules ...
But i found a solution from CPUG forums The Accessrule in the dashboard was like this: ANY - External IP Mailservers - SMTP This cause the Antivirus stuff to drop the traffic on an implied rule. Now I have 2 rules: ANY - External IP Mailservers - SMTP ANY - Internal IP Mailservers - SMTP F. And now when i have the other rule to allow any to internal mailgateway, it works. But still, it uses some CP-s SMTP transparent proxy, and I see some traffic rejections in logs : Information email_control: SMTP Policy Restriction Reason Priave command : XXXX hostname So I think that theres something more to do to completely disable CP-s SMTP. Toomas On Tue, Apr 21, 2009 at 1:58 PM, Eugeniu Patrascu <[email protected]>wrote: > Toomas Vahtra wrote: > >> Well, it's actually discarding about half the unwanted traffic with SMTP >> resources for anti-spoofing and etc, and also some SD rules. >> But thats irrelevant, postfix can do the same. >> I don't really understand how to disable the SMTP security server. >> No option in SmartDashboard, is it enough if I just disable all the rules >> in >> rulebase with SMTP Resource enabled, >> or do I have to delete all the defined SMTP Resources? >> >> >> > IIRC, just disabling the rules with resources attached to them can disable > the SMTP security server. > > Eugeniu Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
