Jaime -
You don't have an Imail problem.
You have a "CheckPoint FireWall-1 secure SMTP server" problem.
The SMTP Daemon at your firewall appears to be an open relay, all by
itself. Leave your Imail server alone. It works.
Your IP [209.233.174.11] is in two Open Relay lists.
Call Checkpoint.
Hope that helps.
-bryan
------------
---------- Forwarded message ----------
[snippety-snip]
Received: from dmzff01.solanocounty.com [209.233.174.11] by list.ipswitch.com
(SMTPD32-5.05) id A9113F200146; Mon, 12 Jul 1999 12:34:25 -0400
Received: from excff01.solano.sol [172.16.2.253] by dmzff01.solanocounty.com
with ESMTP
(SMTPD32-4.04) id A84C590013E; Mon, 12 Jul 1999 09:31:08 PDT
Received: by excff01.solano.sol with Internet Mail Service (5.5.2448.0)
id <3R4BFC31>; Mon, 12 Jul 1999 09:42:32 -0700
Message-ID: <[EMAIL PROTECTED]>
From: "Fontelera, Jaime C." <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: Mon, 12 Jul 1999 09:42:30 -0700
X-Mailer: Internet Mail Service (5.5.2448.0)
Subject: RE: [IMail Forum] Testing for OPEN relay
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
We use Network Address Translation in our firewall. We use class A private
addresses and
are translated to one valid IP address in the Internet. As a matter of fact,
only one valid IP
address goes out from our network because we are also using Hide NAT in our
firewall. I don't think that our private addresses are leaked onto the
Internet like you mentioned in your email.
Maybe instead of putting 10.0.0.0 subnet 255.0.0.0 on the Relay Option, I
should have
added the real network address and their subnet mask. Example: 10.30.0.0
subnet mask 255.255.0.0
Any thoughts ?
-----Original Message-----
From: ## Dusty Carden [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 12, 1999 9:05 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Testing for OPEN relay
In order to secure your server from external relay the
addresses must be valid Internet addresses for the ports
that are exposed to the public.
Private IP addresses exposed like this not only are a relay
risk but also could create routing problems on the Internet.
Dusty
----- Original Message -----
From: Fontelera, Jaime C. <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, July 12, 1999 10:48 AM
Subject: RE: [IMail Forum] Testing for OPEN relay
I selected the Group of Computers option in Relay. Our internal IP
address are all private addresses. The start with 10.x.x.x .
This is exactly what I entered:
IP Address: 10.0.0.0
Subnet mask: 255.0.0.0
We have over 1000 desktop. I don't think it's practical to all of them.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
