Scott,, Thanx for your rply, But I still have the problem... the test@ user which really does not exist on the realy worl still able to send emails to any one on the internet... that means anyone can use any collecting letters and use my Imail server to send emails to the internet and to my local users... which is big problem... I have many users access their mail through the dialup from many ISPs differ than mine, so I cannot use the Relay for addresses only..... Even I used it the test user sill able to access any user arround the world...
Magdy ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, February 23, 2003 3:48 PM Subject: Re: OSRELAY:Re: [IMail Forum] SMTP Problem (1)! > > >Let us say that my domain is purenet.com.eg.... > >and the user created his Non-existing email account say: test..... > >then the Non-exist user is [EMAIL PROTECTED] is that OK?? > >Now, that users using his Outlook express can send emails to any user on > >purenet.com.eg > > The first thing you need to know is that anyone in the world can send out > mail using "[EMAIL PROTECTED]" if they have a mailserver they can send > mail through. If I tell my mail client that I am "[EMAIL PROTECTED]", my > mail client will send out the mail. > > The second thing you need to know is that anyone in the world can send > E-mails *to* your users. To some people this is obvious, but there are a > lot of people that don't really understand that. Anti-relay tools prevent > unauthorized outgoing mail on your mailserver, but anyone can still send > unlimited incoming E-mail. > > >and also to any domain arround the internet.... > > That, however, could be a problem. > > Most likely, you are using "Relay for Addresses" (which is usually a GOOD > setting). That just means that you are allowing your customer to send mail > through your mailserver. > > >After your reply, I sellected : Relay for local users onlyOn my SMTP > >setting. > > Nooooo... that's what got you listed in the spam databases in the first > place. That setting makes you an open relay (anyone at Ipswitch reading > this? that needs to be moved to "Advanced Options", or a pop-up box should > warn the user, or SOMETHING). > > Only "Relay for Addresses" or "No Mail Relay" will prevent you from being a > spammer. > > If you want to make sure that none of your customers can send mail from a > "test@" account, you would have to use "No Mail Relay" (which really means > "Relay mail for anyone who uses SMTP AUTH"). > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches both viruses and vulnerabilities in E-mail, with no > annual licensing fees. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
