Hi, Advertising a primary mx and blocking port 25 for it under the assumption that spammers won't try the secondary mx is wrong. In fact spammers target secondary mx more than primary mx since it is a fact that everyone spends more time on securing and tuning the primary server. We maintain many servers and the fact is we get more spam attempts on all the secondary mx servers.
Rgds DP On Fri, Oct 26, 2018, 18:33 B. Reino <rei...@bbmk.org wrote: > On 2018-10-26 14:36, Poliman - Serwis wrote: > > > Thank you for answer. I have static IP - I bought VPS from OVH. I have > > there > > configured few domains with mailboxes. On the server are services like > > www, > > ftp, mail. So, if I understood well, I should block port 25. > > Maybe you can go back one step and explain why you think you need to > block port 25? > > I mean, if you want to be able to receive e-mails you need to allow > incoming connections on port 25. If you want to send e-mails from your > server then you need outgoing connections on port 25. > > Or did I misunderstand you? >