Best way to block port 25

[me.samip2012]

Hello,

I am getting lots of abuse complaints day by day what is the best way to block port 25 on all vm and ct or stop spam going out from vms and cts, any help will be highly appreciated


thanks

 

[me.samip2012]

I just added the rule in ct


[OPTIONS]

ipfilter: 1
policy_in: ACCEPT
enable: 1

[IPSET ipfilter-net0]

x.x.x.x

[RULES]

OUT REJECT -dest 25
IN REJECT -dest 25


Will this work out ?

 

[me.samip2012]

Anyone who got idea on this matter ?

 

[LnxBil]

Yes, a firewall rule is the best way to do that cluster wide.

 

[me.samip2012]

I dont have cluster actually, I just want to block port on some kvm vm and lxc ct but firewall seems not working, any suggestion
?

 

[LnxBil]

I dont have cluster actually

That does not matter, the term is datacenter firewall and you can block all incoming traffic to port 25 there.

I am getting lots of abuse complaints day by day what is the best way to block port 25 on all vm and ct or stop spam going out from vms and cts, any help will be highly appreciated

Why don't you configure your mail server properly to not accept incoming connections at all?