Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I managed to install the SMTP server on my windows webserver 2008 in order to send emails from PHP or .NET apps running on the server. Everything works fine, but now I am concerned about security. What do I need to do in order to make my SMTP installation safe? Any special settings? There are only one or two apps on the server all written by myself for the same client, so its not a hosting enviroment or something.

Here is what I did in order to set up the SMTP server:

share|improve this question
up vote 1 down vote accepted

The easiest way to make it safe is to disable via the firewall port 25 on the external interfaces, but allow port 25 on the localhost interfaces so your php script will continue to function as expect. This will mean you cannot accept mail into your machine, but according to your question, this isn't an issue.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.