On Fri, 13 Jan 2006, Suresh Ramasubramanian wrote:
(Your new SMTP port filters put in today in the Atlanta market are a step in the right direction, but they are configured incorrectly: They block outbound connections to port 25, which is good -- but they are also blocking *inbound* connections to a local SMTP receiver, which protects nothing and simply annoys those of us who have a clue.)
What they're *trying* to do is actually quite sensible, and beats spammers trying to do asymmetric routing / source address spoofing type stuff
I guess what they actually should do is filtering inbound connections FROM port 25 to any port.
That's why I said that it is misconfigured. The inbound packet filter has the wrong matching criterion. -- -- Todd Vierling <tv@duh.org> <tv@pobox.com> <todd@vierling.name>