D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: kris999 on November 03, 2010, 04:05:28 AM

Title: DFL-210 SMTP whitelist and blacklist.
Post by: kris999 on November 03, 2010, 04:05:28 AM

Dear All,

Is it possible to configure dfl-210 rule for smtp protocol to deny all domain (expression *@*.com is not supported) and allow only domains which are on whitelist?

For example:
block smtp to all domain and allow to to smtp to address something@gmail.com

SMTP ALG ?

Thanks in advance,
Regadrs
Kris

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: scrubsguy on July 27, 2011, 02:27:45 AM

can be possible, but you will need a couple of rules and alg formats, but easiest way would be to add a permission in mail spamscanner or mail AV.

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: danilovav on July 29, 2011, 02:00:35 PM

DFL is firewall appliance (L3, L4), not L7
You can limit, for example, by server IP, but better will be to use local SMTP relay

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: scrubsguy on July 31, 2011, 10:20:28 PM

is is possible to limit the size of the mail coming in? just an interesting question..

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: danilovav on August 02, 2011, 01:49:24 PM

Yes, possible
Can be setted up using SMTP ALG, setting named "Email Size" - maximum allowed email size in kB that is accepted by the ALG

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: scrubsguy on August 03, 2011, 10:13:05 PM

ok so it will then manage the attachments to? if to big then what will it do with the mail?will it just bounce back to the sender?

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: danilovav on August 04, 2011, 07:19:16 PM

No, only whole email size

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: scrubsguy on August 07, 2011, 11:01:22 PM

but will it bounce back to the sender , warning them the size is to big?

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: danilovav on August 09, 2011, 10:02:12 AM

SMTP session will be failed, so originator (SMTP server or client application) will get error and return it to customer

Title: Re: DFL-210 SMTP whitelist and blacklist.
Post by: scrubsguy on August 09, 2011, 09:57:34 PM

cool