Koozali.org: home of the SME Server

How to get SMEServer to reject all email on port 25

Offline brianr

  • *
  • 988
  • +2/-0
How to get SMEServer to reject all email on port 25
« on: November 18, 2019, 01:54:04 PM »
We are migrating one of my servers to cloud based email, and while the MX record changes gets round the internet we want to force the SMEServer to reject all mail.

How to do it?

edit - Took out mention of port 465  - realised that is a red herring.
« Last Edit: November 18, 2019, 01:58:51 PM by brianr »
Brian j Read
(retired, for a second time, still got 2 installations though)
The instrument I am playing is my favourite Melodeon.
.........

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: How to get SMEServer to reject all email on port 25
« Reply #1 on: November 18, 2019, 07:36:03 PM »
We are migrating one of my servers to cloud based email,

Yuck :-( I just run SME in the cloudy sky thing ;-)

Quote
and while the MX record changes gets round the internet we want to force the SMEServer to reject all mail.

How to do it?

edit - Took out mention of port 465  - realised that is a red herring.

You can stop that as well.

ssmtpd=service
    Authentication=enabled
    Instances=10
    TCPPort=465
    access=public
    status=enabled


You need to stop 25 which I guess is:

smtpd=servicesmtpd=service
    Authentication=enabled
    Instances=40
    InstancesPerIP=5
    MaximumDateOffset=0
    PatternsScan=disabled
    Proxy=blocked
    TCPPort=25
    TCPProxyPort=25
    VirusScan=enabled
    access=public
    status=enabled
    tnef2mime=enabled

I guess set them both to private & disabled and signal-event email-update
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: How to get SMEServer to reject all email on port 25
« Reply #2 on: November 19, 2019, 12:37:18 AM »
ReetP, Brian

Quote
I guess set them both to private & disabled and signal-event email-update

After making those db changes,
I think you will need to manually stop those services or achieve the same with a reboot
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: How to get SMEServer to reject all email on port 25
« Reply #3 on: November 19, 2019, 12:41:13 AM »
Yes you are probably right.

I think setting private/disabling them will ditch the ports in the firewall too which will prevent access.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 988
  • +2/-0
Re: How to get SMEServer to reject all email on port 25
« Reply #4 on: November 19, 2019, 10:15:05 AM »
Thanks everyone for the information.  Actually the MX record changes got round very quickly so there was not a need for lots of syncing, however the server will be in use for another week or two to provide the shared sdata until that gets loaded into the cloud so I'll definitely follow the instructions.

Its all part of achieving my (second) retirement!
Brian j Read
(retired, for a second time, still got 2 installations though)
The instrument I am playing is my favourite Melodeon.
.........