Pix506 and SMTP

[Jim2k5]

Does anyone know of a way to configure the PIX to block telnet to port 25 but still allow smtp traffic to pass through?

TIA
Jbruner

 

[tbissett]

Unfortunately, it cannot be done. On the PIX (and just about every other firewall I know of), if port 25 is available, the firewall is not smart enough to distinguish between another post office accessing it vs. another user typing commands in by hand.

 

[Jim2k5]

That's what i thought but I was just hoping maybe someone had come up with a trick solution...thanks for your iput!

Jbruner

 

[yizhar]

HI.

However, the "fixup protocol smtp" command (which is enabled by default) filters the smtp session and allows only the minimal needed SMTP commands.


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar