Re: Amavis IP and ports required for correct operation.
Mike Hodson <[email protected]>
| Newsgroups | gmane.mail.virus.amavis.user |
|---|---|
| Message-ID | <CAN++4hE6CbAa00_r0rfLXpA5URLQPRn7k_eEQjV8MadVcPEa_g@mail.gmail.com> |
Hello Indunil, I'm certain that the original poster understands this, and purposefully blocks all outgoing communication from his server as a security measure. He is far from the only one to implement the 'principle of least privilege'. In fact, his firewall settings prohibit any sort of malicious actor who manages to gain control on the system from wreaking havoc anywhere else. It blocks command and control server contacts. It blocks a lot of potential problems when you want security to actually work and not have holes all over the place. Almost everyone assumes that outbound communication should be treated as 'ok' but in many contexts this is simply not a good idea. Mike On Tue, Nov 3, 2020, 13:43 Indunil Jayasooriya <[email protected]> wrote: > >> grep "208.83.137." messages >> >> DST=208.83.137.117 >> or >> DST=208.83.137.118 >> >> DST for destination. It's OUTBOLUND. >> > You can use amavisd-new without it. > > > >> >> netstat -atnp | grep "208.83.137.118" >> tcp 0 1 MYSERVERIP:53418 208.83.137.118:2703 SYN_SENT >> 7620/amavisd (ch7-0 >> >> >> >> >> >> > > -- > cat /etc/motd > > Thank you > Indunil Jayasooriya > http://www.theravadanet.net/ > >