deny inbound traffic

[FishMan]

i did a port forwarding for all smtp port 25 to my internal server, i also need to deny some specific public ip from accessing to my internal email server.

looking for your help

[DarrenOC]

Hi @FishMan 

This would be configured under your Outbound Firewall rules. Set the destination as the Public IP you want to block and the source as your email server.

[FishMan]

Hi UCcert,

thanks a lot, will try to do this, but it's about more than 10 public that i want to block would it ok

[DarrenOC]

That shouldn’t be a problem @FishMan 

[KarstenI]

@DarrenOCI would not expect this to work. When the connection is coming from the outside it is inspected statefully and the outbound rules are not applied any more to this traffic.

[ww]

Group policy fw rules are stateless. In case the statefull mx fw rules does not work you can try those

[KarstenI]

Just tried it: The Group-Policy approach works!

[FishMan]

can you share how to do this 

[KarstenI]

You have to:

• Create a new Group-Policy
  • Deny all traffic to the list of unwanted servers
  • Allow the rest
• Apply this Group-Policy to the Mail-server