Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[kris999]

Dear All,

Is it possible to configure dfl-210 rule for smtp protocol to deny all domain (expression *@*.com is not supported) and allow only domains which are on whitelist?

For example:
block smtp to all domain and allow to to smtp to address something@gmail.com

SMTP ALG ?

Thanks in advance,
Regadrs
Kris

[scrubsguy]

can be possible, but you will need a couple of rules and alg formats, but easiest way would be to add a permission in mail spamscanner or mail AV.

[danilovav]

DFL is firewall appliance (L3, L4), not L7
You can limit, for example, by server IP, but better will be to use local SMTP relay

[scrubsguy]

is is possible to limit the size of the mail coming in? just an interesting question..

[danilovav]

Yes, possible
Can be setted up using SMTP ALG, setting named "Email Size" - maximum allowed email size in kB that is accepted by the ALG

[scrubsguy]

ok so it will then manage the attachments to? if to big then what will it do with the mail?will it just bounce back to the sender?

[danilovav]

No, only whole email size

[scrubsguy]

but will it bounce back to the sender , warning them the size is to big?

[danilovav]

SMTP session will be failed, so originator (SMTP server or client application) will get error and return it to customer

[scrubsguy]

cool