Thanks to all for the great suggestions. I'm pushing the idea of
[EMAIL PROTECTED] so they can receive SMTP e-mails from the inside
world. As it happens the sending program on the AS/400 simply connects to
port 25 on the Exchange box so there is no need for MX records, we just told
IMS that .internal should be routed <inbound>. 

The only down side is that users can still send e-mail. We can't disable all
outbound SMTP on the server since there are some users that are allowed
"real" addresses. When we presented our idea of "invalid" smtp addresses the
response we got was "we can't give these users access to the internet" which
isn't exactly what we are suggesting so I think it's time to thwap a
customer or two. 

If someone could suggest an idea to prevent these users with invalid SMTP
address from SENDING to the net while allowing users with valid SMTP to send
we'd be all set, but I appreciate all the help I've received so far.

May everyone have a happy and healthy holiday!

-Walden


------------
Walden H Leverich III
President
Tech Software
(516)627-3800 x11
[EMAIL PROTECTED]
http://www.TechSoftInc.com 



-----Original Message-----
From: Peter Johnson [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 18, 2001 02:12
To: Exchange Discussions
Subject: RE: Allowing internal SMTP but not external


Hi Walden

How about this as solution??

1.) Remove the valid internet addresses from the users.
2.) Create invalid, from the perspective of the Internet, addresses for the
users who need to get the mail from the AS400. Route this address as
inbound.
3.) Configure the SMTP service on the AS 400 to deliver mail to the invalid
address directly to the IMS of the Exchange server. 
4.) Configure the IMS on Exchange to deliver replies directly to the IMS. 

The only issue that I can see is that these users will still be able to send
mail out but will not receive replies since they don't have valid SMTP
addresses.

Regards
Peter Johnson


-----Original Message-----
From: Walden H. Leverich [mailto:[EMAIL PROTECTED]] 
Sent: 17 December 2001 23:41
To: Exchange Discussions
Subject: Allowing internal SMTP but not external

OK, I think I know the answer to this, but I told a customer I'd ask. 

I have a customer that wants to limit users from receiving email from the
internet. No problem, remove the SMTP address and they won't be able to
send/receive SMTP mail. However, now they have a requirement for these users
to receive SMTP mail from an internal machine (AS/400 sending e-mail to
local users). Short of going to the SMTP proxy (Firewall-1) and saying drop
messages for user1 and user2 and user3 etc. there is no way I can see of
preventing external SMTP mail while allowing internal SMTP mail. Did I miss
something?

-Walden

------------
Walden H Leverich III
President
Tech Software
(516)627-3800 x11
[EMAIL PROTECTED]
http://www.TechSoftInc.com 


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]




"This e-mail may contain confidential information and may be legally
privileged and is intended only for the person to whom it is addressed. If
you are not the intended recipient, you are notified that you may not use,
distribute or copy this document in any manner whatsoever. Kindly also
notify the sender immediately by telephone, and delete the e-mail. When
addressed to clients of the company from where this e-mail originates ("the
sending company ") any opinion or advice contained in this e-mail is subject
to the terms and conditions expressed in any applicable terms of business or
client engagement letter . The sending company does not accept liability for
any damage, loss or expense arising from this e-mail and/or from the
accessing of any files attached to this e-mail." 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to