> I  don't  quite  understand  how  they could even be receiving email
> reliably  with  a  dynamic  IP  address  on  their  mail server; I'm
> checking  with  the networking company now. Maybe they're using some
> kind of dynamic DNS service?

Obviously,  they are, or their MX record would be constantly obsolete.
Nobody would manage something like that manually.

> I need the Exchange server to authenticate to Imail somehow. There's
> also  the  issue  of  outbound  port  25 being blocked by many major
> ISP's.

Yeah,  so  set  then  up  to  authenticate on port 25 or on your IMail
alternate  port.  MS  SMTP  can  do outbound AUTH to a smart host just
fine.

> We've  toyed  with the idea of requiring SSL connections on port 465
> from the Exchange server

If  the  client  is  on a dynamic IP, you can't require SSL or TLS for
them  alone,  unless  you're  using  some other SSL endpoint that uses
client  certs  or suchlike.

Don't worry about encryption if the client isn't demanding encryption.
Worry  about relaying for them using the standard method of creating a
privileged  session  from  dynamic  IPs:  SMTP  AUTH. From what you've
written,  I  don't  understand what's the big issue here. SMTPS or TLS
are  frills.  VPN tunnel is a frill. They're fine, but if all you want
to do is relay, give 'em an AUTH account and you're done.

> I'm  not  sure of what kind of server-to-server authentication I can
> set up in Imail to prevent us from becoming an open relay.

Relay  for  IPs and authenticated sessions only. You already should be
doing  this.  Their  server becomes another authenticated session with
the same privileges as any other.

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to