Scott, in case you're still looking thru this thread:

FYI, you were right on just about every count.  The ISA's internal IP
address stopped showing up in headers after I changed the binding order of
the ISA's NICs so that the internal one was first followed by the public
one.  And the mail also started flowing in as well at that point.  Many
thanks to Jim Harrison of ISATOOLS.ORG and John Tolmachoff for that one!

Regards,

Victor 

-----Original Message-----
From: R. Scott Perry [mailto:[EMAIL PROTECTED]] 
Sent: Friday, September 20, 2002 7:10 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] How does this "forge" work?



> >With "No Mail Relay", all incoming E-mail to local domains should be 
> >received.
>
>But the SMTP doesn't even respond if you try to hit it via the public 
>IP, which is NATted by the ISA to the IMail server.  My guess is 
>nothing is that it rejects connection attempts from the ISA's internal 
>IP address, since it's no longer on the allowed list.

That should be strictly a firewall/networking issue.

IMail will *always* respond to the IPs that it is listening to, unless an 
IP is denied access with the Control Access file.  Otherwise, nobody will 
be able to send mail to your users -- remember, the mailserver handles both 
incoming mail (which should normally be accepted from everywhere), as well 
as outgoing mail (which should only be accepted from certain known users).

> >Outgoing mail should only be allowed if SMTP AUTH is used.
>
>I'm only sending v�a the web interface.

That's a different story -- web messaging doesn't use SMTP to transfer the 
E-mail to IMail; it always requires a username/password.  The relay 
settings won't affect sending mail with web messaging.

> >Are you saying that with "No Mail Relay", you can't receive incoming 
> >E-mail?
>
>Yep.  No entries even show up in the log showing attempts to deliver 
>incoming mail.

That sounds like a firewall/networking issue.  IMail should always respond 
to the SMTP port and handle mail, unless the IP is denied access with the 
Control Access file (make sure that funky IP the firewall gives to 
everybody isn't listed in the Control Access file).

                                                    -Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Disclaimer_BNCINCMAIL_In
Disclaimer_BNCEXTMAIL_Out

To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to