Re: BLS FastAccess internal tech needed

[Todd Vierling <tv () duh org>]

On Fri, 13 Jan 2006, Suresh Ramasubramanian wrote:

> > (Your new SMTP port filters put in today in the Atlanta market are a step in
> > the right direction, but they are configured incorrectly:  They block
> > outbound connections to port 25, which is good -- but they are also blocking
> > *inbound* connections to a local SMTP receiver, which protects nothing and
> > simply annoys those of us who have a clue.)
>
> What they're *trying* to do is actually quite sensible, and beats
> spammers trying to do asymmetric routing / source address spoofing
> type stuff
>
> I guess what they actually should do is filtering inbound connections
> FROM port 25 to any port.

That's why I said that it is misconfigured.  The inbound packet filter has
the wrong matching criterion.

-- 
-- Todd Vierling <tv () duh org> <tv () pobox com> <todd () vierling name>