Thank you for the excellent response.
Do you have any idea how to set up Eudora lite to collect mail from the
outside? This is the only one that I'm having any real problems with. The
Netscape and Outlook people are easy.
----- Original Message -----
From: Len Conrad <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 25, 2000 1:02 PM
Subject: Re: [IMail Forum] SMTP Security
>
> >We are running Imail V5.07. This last month we started seeing a lot of
spam
> >after two years as an open relay. We decided to change our stratagy a
> >little. We set the Relay options to Relay mail for (all 15 of our class c
> >address ranges)
>
> good move, the best way.
>
> >We also have allw remote mail to local groups checked, Check
> >valid sender and Disable SMTP "VRFY" command checked. I have a lot of
people
> >that are in the field using our mail server but not logging into us.
>
> try to get them to send mail through the ISP giving them access, is best,
> if they can't then all your dial-up clients "for their protection" must
use
> SMTP AUTH for their outgoing SMTP mail to your server.
>
> >I keep getting things like this. (Keep in mind that usmginc.com is a
domain
> >on our system and is is in the virtual host list.)
> >
> >04:25 08:33 SMTPD(14BD011E) [209.101.87.2] connect 208.61.164.63 port
1030
> >220 X1 NT-ESMTP Server spacey.net (IMail 5.05 9503-3)
> >HELO charles
> >04:25 08:33 SMTPD(14BD011E) [208.61.164.63] HELO charles
> >250 hello spacey.net
> >MAIL FROM: <[EMAIL PROTECTED]>
> >250 ok
> >04:25 08:33 SMTPD(14BD011E) [208.61.164.63] MAIL FROM:
> ><[EMAIL PROTECTED]>
> >RCPT TO: <[EMAIL PROTECTED]>
> >04:25 08:33 SMTPD(14BD011E) [208.61.164.63] RCPT TO:
<[EMAIL PROTECTED]>
> >[x] looking up TSBI.ORG in HOSTS
>
> means TSBI.org is not ok in NT HOSTS file for relaying,
> Imail relaying denied for "RCTP TO: @TSBI.org"
>
> and the SMTP client at 208.61.164.63 is an ADSL line at bellsouth, a
> "dial-up user", it's not a MX in DNS.
>
> >I made this work by putting a check mark in the check valid sender box.
This
> >has now caused a flood of phone calls from people who do not have their
from
> >address or reply to address filled out properly.
>
> hmm, your call there, they are being, maybe ignorantly, bad netizens and
> risk not having their mail accepted many places, so "for their own good",
> try to straighten their mail clients out.
>
> >I have several companys that connect to us via Lan and they use our mail
> >server but their domains are not hosted on our systems.
>
> then you put their ip addresses in your "relay for addresses", assuming
you
> "trust" them.
>
> >Is the above configuration the best bet for us?
>
> what's missing is you specifying to all your users to connect "for your
and
> their own security and protection" to your mail server using SMTP AUTH in
> their mail clients. Then even the guy hanging out their on the end of a
> bellsouth adsl line can send AUTH'ed mail through you.
>
> Len
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
