Hello, please let me know the process for unsubscribing from all the mailing lists of pfsense.
Thanks and Regards, *Rizul Khanna* rizulkha...@gmail.com | +91 8595370298, +91 9501074400 | http://www.linkedin.com/pub/rizul-khanna/39/81/a3b | http://virtualizationforyou.blogspot.in/ | On Thu, Oct 9, 2014 at 4:50 PM, Chris Bagnall <pfse...@lists.minotaur.cc> wrote: > On 9/10/14 12:05 pm, Mikey van der Worp wrote: > >> Today I have come to you with the question on how to block users from >> spamming with smtp/25, behind NAT and the IP of PfSense (< NAT). We do not >> wish/want to block the entire SMTP traffic in the private range to the >> world, because there are important clients behind the pfSense, who actually >> behave normally, we thought about forcing all the SMTP traffic to be >> redirected trough the pfsense machine, so it can be scanned/blocked. (even >> when the user decides not to do this and want to use their own SMTP server). >> > > I'd have to caution *against* doing the above. Many people have their mail > clients set to use TLS for outbound mail (quite sensibly), and that will > invariably break if you try to intercept traffic to port 25 and run it > through your own filtering mail server. > > It's the bane of my life when we have clients staying in hotels that do > this :-) > > Worth adding from a user privacy perspective, it's pretty bad manners to > intercept outbound mail traffic, especially if your users aren't explicitly > consenting to this being done. > > If you want to prevent outbound spam from your users, I'd suggest setting > up an SMTP smarthost that sends mail on behalf of your users (I'm sure > there are probably pfSense packages for this, but I'd do it on another > server, personally), educate your users about using this upstream SMTP > server, give them time to change mail settings etc., then block port 25 > outbound and specifically open it for clients that need (legitimately) to > use it. > > The important thing is explaining to users what you're doing, why you're > doing it, and how they can 'opt out' of it if they want/need to. > > Kind regards, > > Chris > -- > This email is made from 100% recycled electrons > _______________________________________________ > List mailing list > List@lists.pfsense.org > https://lists.pfsense.org/mailman/listinfo/list >
_______________________________________________ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list
