Mark Constable writes:

I set up one small VPS as an alternate outgoing mail server for those
times when our main mailservers gets blacklisted and do not want it to
handle incoming mail or act as a 2nd MX. What config settings could I
safely tweak to turn off port 25 and still allow outgoing mail to be
delivered?

25/tcp  open  smtp
465/tcp open  smtps
587/tcp open  submission

All you have to do is basically not start the esmtp listeners. Depending on what startup scripts you're using, it should be a matter of setting ESMTPDSTART=NO (in esmtpd and esmtpd-msa) and ESMTPDSSLSTART=NO in (esmtpd- ssl).

But how are you getting mail to your backup outgoing server? Probably by SMTP from your main servers, so you can't really shut down smtp.

What you should do is bind your esmtp listeners to the server's IP on your VPN. Just set the ADDRESS in your config file to your backup server's IP address that's reachable via the VPN, so it's only going to accept mail over SMTP over the VPN, and won't listen on the public IP addresses.

Attachment: pgpnVlAe1ce1H.pgp
Description: PGP signature

------------------------------------------------------------------------------
Own the Future-Intel® Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game 
on Steam. $5K grand prize plus 10 genre and skill prizes. 
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to