[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

pf firewall and sendmail/DNS question to private address!



Hi all

I have 2 questions. Do you have any ideas? 

1/ I have a rule for the private ip addresses in
openbsd. but outsiders can access the sendmail server
to establish to connection to the private ip - I got
log from outside firewall) 
 (272 Deny TCP 202.30.20.10:43053 172.16.10.12:25 in
via)


block drop in quick on fxp1 inet from 127.0.0.0/8 to
any
block drop in quick on fxp1 inet from 192.168.0.0/16
to any
block drop in quick on fxp1 inet from 172.16.0.0/12 to
any
block drop in quick on fxp1 inet from 10.0.0.0/8 to
any
block drop out quick on fxp1 inet from any to
127.0.0.0/8
block drop out quick on fxp1 inet from any to
192.168.0.0/16
block drop out quick on fxp1 inet from any to
172.16.0.0/12
block drop out quick on fxp1 inet from any to
10.0.0.0/8
pass in on fxp0 inet proto tcp from any to any port =
smtp flags S/SA keep state

2/ how can I configure the sendmail and DNS to not to
response the private address?

Thank you