close pop, imap and smtp ports¡ if server is not used for mail?

[craigedmonds]

If my cpanel server is only used for web hosting and there are no mail services being used (mail is on a different server), should I close certain ports like 110 to prevent attacks?

The web sites of course will be sending mail so outgoing smtp needs to be active I guess.

So should I remove ports 110 + 143 + 25 + 587 from the TCP_IN in CSF?

[cPanelTristan]

Hello Craig,

Will you be unchecking those services in WHM > Service Manager as well? If you close off the ports and do not shut off the services, then you will begin getting chkservd failure emails.

Thanks.

[cPanelJared]

I also wanted to mention that if you simply shut down the unused services, there is no need to also block their ports in a firewall. A port is not open unless a service is listening on it. If no service is listening on a port, then also blocking it in the firewall is redundant.