Thanks Scott. If I check "Relay for Addresses" or "No Mail Relay" can I still uncheck "Disable SMTP AUTH reporting" so that people can check mail on machines outside our network? Will IMail allow users to send mail using SMTP authentication even if the IP address of the machine is not in the list of available IPs?
Ron -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, March 20, 2002 2:33 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Imail Question >I am under the impression that "Relay for local users only" is still an open >relay and my mail server is susceptible to being used by spammers - is this >true? Yes, that is correct (only "Relay for Addresses" and "No mail relay" are safe). >What if I selected "Relay for local users only" and unchecked "Disable SMTP >AUTH reporting" - would I still be susceptible to spammers misusing my >server? Yes. "Relay for local users only" means that anyone claiming to be a local user can relay mail, and gets to bypass any type of authentication. So the spammers have no problem sending their mail. >Apparently, if I install Declude Hijack, I will not bother with "Relay for >local users only," "Disable SMTP AUTH reporting," nor the ability for >Netscape to save the SMTP password - is this statement correct? Yes, although you will technically still be an open relay (and may get listed in spam databases, but not ORBZ that shut down today). It's best not to have an open relay, but if you need to for some reason, Declude Hijack will protect you. >Does "Auto Deny Possible Hack Attempts" really offer protection from >hackers? Could I potentially cause myself problems by checking this box? The general consensus is that it will automatically cut off access to any IP address that tries sending longer-than-allowed SMTP commands (the same type that often can cause IIS to obey hackers). I'm not aware of it causing any problems. Just be sure not to check "Refuse bounce messages" (listed as "Refuse NULL <> Senders" in IMail Administrator). -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
