This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
networking:router:mikrotik_mail [2017/07/06 15:34] gcooper |
networking:router:mikrotik_mail [2018/05/25 09:35] (current) gcooper |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Mikrotik Routers | + | ====== Mikrotik Routers |
- **Define list of spam filter servers** | - **Define list of spam filter servers** | ||
Line 7: | Line 7: | ||
- **Block outbound SMTP traffic** | - **Block outbound SMTP traffic** | ||
* But not from the internal mail server | * But not from the internal mail server | ||
+ | |||
+ | <note tip> | ||
+ | |||
+ | ===== Example Configuration ===== | ||
+ | |||
+ | ^192.168.51.8 | ||
+ | ^ether1 | ||
+ | ^123.123.123.123 |External (Public) IP Address | ||
+ | |||
+ | FIXME You can use hostnames in newer versions of RouterOS. | ||
+ | |||
+ | :!: You must **adjust as necessary** (copy-> | ||
< | < | ||
/ip firewall address-list | /ip firewall address-list | ||
- | | + | add address=5.10.67.0/ |
- | add address=94.186.192.0/ | + | add address=94.186.192.0/ |
- | add address=174.36.154.0/ | + | add address=174.36.154.0/ |
- | add address=192.69.16.0/ | + | add address=192.69.16.0/ |
- | add address=192.69.17.0/ | + | add address=192.69.17.0/ |
- | add address=192.69.18.0/ | + | add address=192.69.18.0/ |
- | add address=192.69.19.0/ | + | add address=192.69.19.0/ |
- | add address=208.43.37.0/ | + | add address=208.43.37.0/ |
- | add address=208.70.88.0/ | + | add address=208.70.88.0/ |
- | add address=208.70.89.0/ | + | add address=208.70.89.0/ |
- | add address=208.70.90.0/ | + | add address=208.70.90.0/ |
- | add address=208.70.91.0/ | + | add address=208.70.91.0/ |
/ip firewall filter | /ip firewall filter | ||
Line 27: | Line 39: | ||
out-interface=ether1 protocol=tcp src-address=!192.168.51.8 | out-interface=ether1 protocol=tcp src-address=!192.168.51.8 | ||
+ | /ip firewall nat | ||
+ | add action=dst-nat chain=dstnat comment=" | ||
+ | dst-port=25 in-interface=ether1 protocol=tcp src-address-list=spamfilter to-addresses=192.168.51.8 | ||
</ | </ |