[SOLVED] Change defaut setting ( 4.5.7 ; relay same subnet)

[twconcept]

Hello,

By default proxmox accepts all connections being on the trusted internal network.

admin guide : 4.5.7
( NoteHosts in the same subnet with Proxmox can relay by default and it’s not needed to add them in this list.)


we want to deactivate this rule, and use "network transport list" to authorize connections.
we have servers on the same network and we don't want them to be able to connect automatically.

thanks for the hekp and sorry for my english ( i am french ).

 

[dietmar]

I would put a firewall in front of the mail gateway(move it to your DMZ).

 

[twconcept]

hello,

It is not possible, I have clients who do not have a DMZ or possible DMZ

is it possible to configure acl to allow only known computers to send an email ( interne or externe )

pcguest --> mail from xxx -> rcpt to: email internal domaine --> refused
pcguest --> mail from internal domaine -> rcpt to : email internal domaine --> refused

pc director --> mail from internal domaine -> rcpt to : email internal domaine --> accepted
pc director --> mail from internal domaine -> rcpt to : external domaine --> accepted


thanks

 

[twconcept]

==> SOLVED - Valide interne domaine and ACL for server