Well, it sure isn't true for 8.15. I run two real domains, and they are REALLY separate. They run through the same NIC, and the same firewall (different rules, of course, because they are different IPs').
I believe you are mistaken about 8.2 and 9, but I can only speak what I know and run. Sniffer trace available on request. Dan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sanford Whiteman Sent: Friday, January 12, 2007 2:51 PM To: Imail Subject: Re: [IMail Forum] Multiple IPs and the gateway > This is so that we can have their IP blacklisted if they have > problems and not our primary IP. That's a fallacy unless you have separate physical NICs. The source IP of packets coming from a physical NIC will be the primary IP assigned to the NIC in Windows, regardless of secondary IPs also bound to the card. This is because the outbound IMail socket is bound with the directive INADDR_ANY, which allows Windows to choose the IP. I believe this was finally fixed in 9.x, but not in your 8.22. > I also want to use a gateway with virus and spam filtering that can > be tailored for each domain and can authenticate users per domain > regardless of the IP they are using. "Authenticate" with username and password? Do you actually mean "verify" extant recipients? You should be able to continue to use your mailbox server for authenticated mail submission by your users. Yes, your gateway needs to maintain a list of remote users on your mailbox server so it can reject unknown recipients. Just about any gateway solution worth its salt can do this. For recipient verification + advanced anti-abuse at the gateway, there's free, powerful SMTP with low-cost ORF anti-spam add-on; a cookbook for free *nix-based Postfix, called IMGate, maintained by Len Conrad; and numerous other options, commercial and free, across all platforms. First criterion will be your OS preference. After that, you have to be a lot more specific about your desires. Recipient validation + some level of anti-abuse basically *define* a gateway, so they're in a sense irrelevant to your spec. --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/relea se/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downl oad/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/ release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
