Hello...
Trying to get my server protected from spammers. sys*.txt files look
suspicious. Here's my current setup. I'd appreciate any suggestions for
improving the system.
Relay for local users only = yes
Check valid sender = yes
AutoDeny possible hack attempts = yes
Disable SMTP "VRFY" command = yes
Disable SMTP "AUTH" reporting = no
Allow remote mail to local groups = yes
Allow remote view of local groups = yes
Refuse NULL <> Senders = no
Whois, Finger, and Password services = not running
IMail 6.04 on NT4 on a netscreen firewall and VPN WAN
I have < 100 users, all employees of the company. Most are on the VPN, but
need to accept those who may be travelling outside the WAN
Here's a snip of my sys*.txt
11:12 09:56 SMTPD(007301CC) [my.private.ip] connect my.public.ip port 5863
11:12 09:56 SMTPD(007301CC) [my.public.ip] EHLO legituser
11:12 09:56 SMTPD(007301CC) [my.public.ip MAIL FROM:<[EMAIL PROTECTED]>
11:12 09:56 SMTPD(007301CC) [my.public.ip RCPT TO:<[EMAIL PROTECTED]>
11:12 09:56 SMTPD(007301CC) [my.public.ip] C:\IMail\spool\Dff461cc.SMD 881
11:12 09:56 SMTP-(000000BB) processing C:\IMail\spool\Qff461cc.SMD
11:12 09:56 SMTP-(000000BB) ldeliver myserver.mydomain.com legituser2-main
(1) <[EMAIL PROTECTED]> 881
11:12 09:56 SMTP-(000000BB) finished C:\IMail\spool\Qff461cc.SMD status=1
11:12 09:56 SMTPD(008401CC) [my.private.ip] connect my.public.ip port 4094
11:12 09:56 SMTPD(008401CC) [my.public.ip] EHLO backpos1
11:12 09:56 SMTPD(008401CC) [my.public.ip] MAIL FROM:<[EMAIL PROTECTED]>
11:12 09:56 SMTPD(008401CC) [my.public.ip RCPT TO:<unknownuser@unknowndomain>
11:12 09:56 SMTPD(008401CC) [my.public.ip] C:\IMail\spool\Dff551cc.SMD 1168
11:12 09:56 SMTP-(000000C9) processing C:\IMail\spool\Qff551cc.SMD
It's all those C:\Imail\spool\*.smd lines that bother me. I used to have a
bunch of them in spool directory, but I removed them when I set relay to
'for local users only.". There are no smd in spool anymore.
I also suspect I need to uncheck Disable SMTP "VRFY" command, though I'm
unclear what effect that would have on my users, both behind the WAN VPN
and from outside.
Any help would be greatly appreciated.
Thx,
D.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
