Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 9 Mar 2004 16:56:35 +0200
From:      Mike Jackson <mj@sci.fi>
To:        freebsd-questions@freebsd.org
Subject:   firewall rules for mail gateway
Message-ID:  <20040309145635.GG8152@gentoo.netauth.com>

next in thread | raw e-mail | index | archive | help
Hi,
 I have a 5.2.1 firewall box that also has a mailserver.

Goal:

 - firewall can send and receive mail <-> rest of the world
 - firewall can send and receive mail <-> internal LAN machines
 - firewall blocks internal LAN machines from connecting to
   external SMTP servers

firewall/mail gw
-----------------------
xl0 - public interface
xl1 - private interface (gateway ip for LAN) 192.168.1.1


I tried something like:

block out quick on xl1 proto tcp from any to any port = 25

with no effect, workstations could still get past it.

Any help would be appreciated :-)

Thanks,
-- 
Mike Jackson



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040309145635.GG8152>