Block Client Computer from Accessing Port 25 Outside Network

[waikiki]

Hi,

Is this possible?
I want to block all my computers behind wingate to connect to port 25?

Any ideas will be greatly appreciated.

Thanks!

[logan]

Yes, it's definitely possible to do this, although the method will differ depending on how your client computers connect to the Internet through WinGate.

If your clients are using plain NAT, it's simply a case of blocking port 25 in the firewall:
- Gatekeeper-> System -> Extended networking -> Port Security
- Click Add
- Enter a description
- Deselect "Internet computers to the WinGate PC"
- Select "Local computer to the internet"
- Enter the port range 25 to 25
- Select Drop Packet
- Click OK, then OK

[waikiki]

Thanks Logan!
You're really a big help!

[waikiki]

@logan

a follow up question.
if i do this would this also block the mail server that is installed in the wingate box or it would only allow the clients that connect to the wingate box?

thanks!
Aaron

[logan]

This would only block client computers that NAT through WinGate's ENS driver to reach the internet. If your mail server was a client computer behind WinGate, this would block it, but since it is installed on the WinGate computer, it will be fine. Your client computers will still be able to send emails to your mail server on the WinGate computer as well since port 25 is still open under Local computers to the WinGate PC.