I've got Authenticated relaying enabled. Any IP I put in Block hosts still gets through and I get warning mails about failed authentication. What to do?
Are there multiple IPs, because it looks like you're using a Network Group for traffic from?
These are external IPs that you're trying to blacklist, correct?
Are you using the default SMTP service definition, where source port is 1:65,535 and destination port is 25?
The address for OpenFiber 100-100 is the one used in your external DNS MX record (the one mails will come into, correct?
Assuming that you have multiple external IPs, you've confirmed that the OpenFiber 100-100 address is the one that they are attempting to connect to, right?
As you have log initial packets checked, anything showing in the full firewall log for these connections?
__________________ ACE v8/SCA v9.3
...still have a v5 install disk in a box somewhere.
Are there multiple IPs, because it looks like you're using a Network Group for traffic from?
These are external IPs that you're trying to blacklist, correct?
Are you using the default SMTP service definition, where source port is 1:65,535 and destination port is 25?
The address for OpenFiber 100-100 is the one used in your external DNS MX record (the one mails will come into, correct?
Assuming that you have multiple external IPs, you've confirmed that the OpenFiber 100-100 address is the one that they are attempting to connect to, right?
As you have log initial packets checked, anything showing in the full firewall log for these connections?
Yes there is multiple IPs, all external. SMTP is the default service definition. I only have one IP, so everything is coming in on OpenFiber 100-100.
In firewall log I see "Packet dropped" for the IPs in the Block-smtp network group, but only after they've been blocked after to many failed logins. Nothing about NAT in the log.
Are there multiple IPs, because it looks like you're using a Network Group for traffic from?
These are external IPs that you're trying to blacklist, correct?
Are you using the default SMTP service definition, where source port is 1:65,535 and destination port is 25?
The address for OpenFiber 100-100 is the one used in your external DNS MX record (the one mails will come into, correct?
Assuming that you have multiple external IPs, you've confirmed that the OpenFiber 100-100 address is the one that they are attempting to connect to, right?
As you have log initial packets checked, anything showing in the full firewall log for these connections?
Yes there is multiple IPs, all external. SMTP is the default service definition. I only have one IP, so everything is coming in on OpenFiber 100-100.
In firewall log I see "Packet dropped" for the IPs in the Block-smtp network group, but only after they've been blocked after to many failed logins. Nothing about NAT in the log.
