]> git.ipfire.org Git - ipfire-2.x.git/commit
firewall: Reject outgoing TCP connections to port 25 by default
authorPeter Müller <peter.mueller@ipfire.org>
Sat, 4 Nov 2023 17:35:00 +0000 (17:35 +0000)
committerPeter Müller <peter.mueller@ipfire.org>
Tue, 21 Nov 2023 19:04:44 +0000 (19:04 +0000)
commit726c4b0f4ab6cc53ccf0b756b585681591226966
tree5c48927055811b22b82a072d9d5304f243a3991d
parentc434310d036d04aa68f265f8df8368cf0157f6eb
firewall: Reject outgoing TCP connections to port 25 by default

This will affect new IPFire installations only, implementing a
long-standing BCP for preemptively combating botnet spam. Reject is
chosen over drop to reduce the likelihood for confusion during network
troubleshooting.

Cc: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Tested-by: Peter Müller <peter.mueller@ipfire.org>
config/firewall/config [new file with mode: 0644]
lfs/configroot