lots of connection on Port25 - how to suppress or prevent ?!

Discussion for beta versions of WinGate

lots of connection on Port25 - how to suppress or prevent ?!

Postby sigih. » Sep 11 11 10:35 pm

Hello Wingate7 users,

I've lot's of connections on port 25 - SMTP - and sometimes lot's of traffic.
Can someone tell me how can I prevent this?
Think these connections come from portscanners or so.

I've a mailserver behind wingate with "empty" logs - so I think the mailserver works correct, Wingate7 also.
Mailserver on Wingate7 is deactivated - only SMTP del. service is active and works - I get every notification via email.

Sigi-0000.png

Sigi-0002.png


tnx for help and regards
sigih.
You do not have the required permissions to view the files attached to this post.
sigih.
 
Posts: 46
Joined: May 19 09 8:43 pm
Location: Telfs / Austria ... middle of the Alps ...

Re: lots of connection on Port25 - how to suppress or preven

Postby adrien » Sep 12 11 9:37 am

that's your web proxy.

You have it open to the internet, and it's allowing CONNECT requests. You need to lock down access to that proxy from the outside. Otherwise your IP will get blacklisted. It probably already has been.

Since you're running a web server behind WinGate, you need your proxy open, but you can use policy to control access in the ConnectRequest event, to only allow authenticated users, or none at all.

We often find it's good to use a different proxy for incoming (internet to internal) vs outbound (internal to internet) connections, so you can separate policy.

Adrien
adrien
Qbik Staff
 
Posts: 5201
Joined: Sep 03 03 2:54 pm
Location: Auckland


Return to WinGate Beta

Who is online

Users browsing this forum: No registered users and 1 guest

cron