>I am under the impression that "Relay for local users only" is still an open
>relay and my mail server is susceptible to being used by spammers - is this
>true?
Yes, that is correct (only "Relay for Addresses" and "No mail relay" are safe).
>What if I selected "Relay for local users only" and unchecked "Disable SMTP
>AUTH reporting" - would I still be susceptible to spammers misusing my
>server?
Yes. "Relay for local users only" means that anyone claiming to be a local
user can relay mail, and gets to bypass any type of authentication. So the
spammers have no problem sending their mail.
>Apparently, if I install Declude Hijack, I will not bother with "Relay for
>local users only," "Disable SMTP AUTH reporting," nor the ability for
>Netscape to save the SMTP password - is this statement correct?
Yes, although you will technically still be an open relay (and may get
listed in spam databases, but not ORBZ that shut down today). It's best
not to have an open relay, but if you need to for some reason, Declude
Hijack will protect you.
>Does "Auto Deny Possible Hack Attempts" really offer protection from
>hackers? Could I potentially cause myself problems by checking this box?
The general consensus is that it will automatically cut off access to any
IP address that tries sending longer-than-allowed SMTP commands (the same
type that often can cause IIS to obey hackers). I'm not aware of it
causing any problems. Just be sure not to check "Refuse bounce messages"
(listed as "Refuse NULL <> Senders" in IMail Administrator).
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
