[Squawk 8888]

Yep- that connection shows outbound on 2591 to a host that is listening on 25. The idea of the block is to disallow connections to servers listening on 25.

[N3WBI3]

Ok I read your post wrong, thought you were saying send and receive on 25, this is not that case...

If the spam is being sent by bots closing down 25 wont do anything becuase they dont send on that port..