Candid Aeby wrote:
> Hi
> 
> first this is no local decision. We never liked it. I know it is unpopular
> and i would prefer a better solution. Since Monday Port 25 is blocked for
> Dial-Up and ADSL connections.

Is that outbound from $customer -> $internet, or is that also for
inbound $internet -> $customer?

Having a block on port 25/tcp, 137-139/udp and some other magic
virusports is acceptable on end-user IP's. BUT as long as the user of
that line has the option to easily turn this off. Eg using a
webinterface where they can login using their user/pass and then enable
it again, that is disable the block. If that is not possible, then when
a user moans about not getting "Internet connectivity" they are quite right.

Users who are not the typical techy, can always use 587 as you indicated
and should, in general, keep the block on.

To avoid problems there, make a simple policy: if found spreading a
virus/spamming and having disabled the blockage: no Internet for a week.
Or a similar measure that can of course be lifted after paying a fine.

Greets,
 Jeroen

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Reply via email to