That's not what the fixup protocol does.  It basically strips anything
out but HELO, MAIL, RCPT, DATA, QUIT, RSET, and NOOP, and doesn't send
them to your SMTP server.  So MAIL TO: would go through, but AUTH LOGIN:
would not.  And you're requiring AUTH to allow your external clients to
relay.

So make your management choose.  Do they want to relay spam?  Do they
want to allow your users to use POP3 at home?  I say again, mailguard
isn't necessarily evil.  It just really doesn't do anything to add any
level of security.


> -----Original Message-----
> From: Tony Hlabse [mailto:[EMAIL PROTECTED]] 
> Posted At: Friday, February 22, 2002 01:25 PM
> Posted To: MSExchange Mailing List
> Conversation: PIX fixup and E2K
> Subject: Re: PIX fixup and E2K
> 
> 
> With the smtp fixup applied. Users who access the email 
> server via their ISP connection can not send mail to people 
> with outside email addresses. I guess the  command like mail 
> to: gets sent to the email server as a xxxx command by PIX 
> since it is not allowing a telnet session  thus a relay 
> message is sent to the user. 5.7.1 can not relay. Once smtp 
> fixup is removed everything is fine.
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to