Helo! My policy is to block client which gets IPs from DHCP. All other IPs (good clients) can be manualy dedicated to their MAC addresses adnd allowed through. Servers shoud have static IPs of course. You can also add another rule for logging only, so you can chech who is te "bad one"
Lep pozdrav / Best regards Andrej Ferčič, univ.dipl.inž. and...@pcklinika.si<mailto:and...@pcklinika.si> M +386 41 71 60 89 PCklinika d.o.o.., Belšakova ulica 9, SI-2250 Ptuj, Slovenija | T +386 2 780 61 80 F +386 2 780 61 81 W www.pcklinika.si<http://www.pcklinika.si/> From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Mikey van der Worp Sent: Thursday, October 09, 2014 1:06 PM To: list@lists.pfsense.org Subject: [pfSense] Issue with SMTP - Spam behind NAT To whom it may concern, Today I have come to you with the question on how to block users from spamming with smtp/25, behind NAT and the IP of PfSense (< NAT). We do not wish/want to block the entire SMTP traffic in the private range to the world, because there are important clients behind the pfSense, who actually behave normally, we thought about forcing all the SMTP traffic to be redirected trough the pfsense machine, so it can be scanned/blocked. (even when the user decides not to do this and want to use their own SMTP server). Is there some documentation for this or rate-limiting available? Do you might have any solutions for the problem described above? The current situation causes our server to be blocked at blacklists. Hopefully somebody can help me out! Thanks in advance, Mikey van der Worp - Mikey van der Worp<https://www.linkedin.com/profile/view?id=182619557> System Administrator Utelisys Communications B.V. Trinity Buildings Tower A, 7th floor Pietersbergweg 15 1105 BM Amsterdam Tel +31 - 20 - 561 8010 Fax +31 - 20 - 561 8021 "Like us" on facebook https://www.facebook.com/utelisyscommunications "Follow us" on Linkedin https://www.linkedin.com/company/utelisys-communications-b.v./ www.utelisys.com<http://www.utelisys.com/> - https://www.utelisys.com/
_______________________________________________ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list
