Amavis IP and ports required for correct operation.

[Mike Hodson]

Hello Indunil,
I'm certain that the original poster understands this, and purposefully
blocks all outgoing communication from his server as a security measure.

He is far from the only one to implement the 'principle of least
privilege'. In fact, his firewall settings prohibit any sort of malicious
actor who manages to gain control on the system from wreaking havoc
anywhere else. It blocks command and control server contacts. It blocks a
lot of potential problems when you want security to actually work and not
have holes all over the place.

Almost everyone assumes that outbound communication should be treated as
'ok' but in many contexts this is simply not a good idea.

Mike


On Tue, Nov 3, 2020, 13:43 Indunil Jayasooriya <indunil75 at gmail.com> wrote:

>
>> grep "208.83.137." messages
>>
>> DST=208.83.137.117
>> or
>> DST=208.83.137.118
>>
>> DST for destination. It's OUTBOLUND.
>>
>     You can use amavisd-new without it.
>
>
>
>>
>> netstat -atnp | grep "208.83.137.118"
>> tcp        0      1 MYSERVERIP:53418    208.83.137.118:2703     SYN_SENT
>> 7620/amavisd (ch7-0
>>
>>
>>
>>
>>
>>
>
> --
> cat /etc/motd
>
> Thank you
> Indunil Jayasooriya
> http://www.theravadanet.net/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.amavis.org/pipermail/amavis-users/attachments/20201103/2c6d5d82/attachment.htm>