Kevin, I run both products on different servers, however, the routing and relaying between is the same. Now, I run it on a much larger scale, as I have multiple WebshieldIn's and WebshieldOut's servers, with two iMail servers in between. I hope your server is powerful, because Webshield is a major hog on resources. Your problem though is running them on the same machine. You would need to make Webshield your exposed machine that catches all mail for your domain. Webshield gives you the option of using DNS or relaying to direct hosts, or a combination. Therefore you would relay mail to your iMail server, and use your inbound rules to restrict sending and receiving only from your domain. However, you have iMail on there also, and there is your problem. You need to leave port 25 open, and therefore you expose iMail. If you could separate the two, which is what Network Associates is saying, you can use your Webshield machine as your incoming and outgoing relay for iMail. All mail would be scanned going both ways, and iMail would be isolated. External DNS can handle all of your ISP problems.
The key to your problem is DNS. How is your DNS configured internally and externally? We run DNS on the Webshields as NA suggests that forward on to extenal DNS servers for resolution on the Internet. We are an ISP, that is why the large scale setup. Hope that helps, James ----- Original Message ----- From: "Kevin Stanford" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, January 22, 2004 2:12 PM Subject: RE: [IMail Forum] No mail relay/webshield for SMTP > Here is the response I got back from Network Associates. I guess I will > need to use the "outbound" smtp server for the dial-up provider our users > log into to fix the spam relay problem... > > Thanks Travis for the help. > > Kevin > > > Subject Anti Spam-relay > Details Details: > How do we allow for Internet Dial-Up accounts not to be blocked by having > the "Enable anti spam-relay" checked. We have several user that use > different ISPs and it has become a nightmare trying to keep up with what IP > addresses to allow, especially since each time they dial in they are given > a different IP address. If we allow the entire subnet of an ISP we are > leaving ourselves open for spammers. Any suggestions or fixes forthcoming? > > Error Message: > Solution The customer will need to create another source for his users to > relay their outbound traffic to. > > > At 10:05 AM 01/22/2004, you wrote: > >I don't have experience myself with Webshield, but someone else can point > >out where to add the domains you want to relay for in Webshield. It will > >mimic something like this: > > > >DOMAIN TO ACCEPT MAIL FOR DESTINATION IP ADDRESS OF IMAIL SERVER > >yourdomain.com IP ADDRESS > >yourotherdomain.com IP ADDRESS > > > > > >If you choose to RELAY ALL MAIL, this will be the result > > > >DOMAIN TO ACCEPT MAIL FOR DESTINATION IP ADDRESS > >hotmail.com ANY IP ADDRESS > >msn.com IP ADDRESS > >farmlove.com IP ADDRESS > >anydomain.com IP ADDRESS > > > > > > > >The thing to remember is that the settings above have *nothing* to do with > >where the sender is at or coming from. I imagine there must be some > >documentation for Webshield somewhere that would explain this. > > > > > >Travis > > > > > > > >-----Original Message----- > >From: [EMAIL PROTECTED] > >[mailto:[EMAIL PROTECTED] Behalf Of Kevin Stanford > >Sent: Thursday, January 22, 2004 7:58 AM > >To: [EMAIL PROTECTED] > >Subject: RE: [IMail Forum] No mail relay/webshield for SMTP > > > > > >Sorry I just don't understand what I need to do to make this work for me. > > > >1. I want to make sure that I am not an open relay > >2. I want to relay mail for all users on my Domain inside and outside of > >our network > > > >What settings do I need to setup to allow for this in Webshield and Imail? > > > >Sorry to sound ignorant on how to accomplish this...just need a little > >guidance... > > > >Kevin > > > >At 09:43 AM 01/22/2004, you wrote: > > >That has nothing to do with it. In Webshield you *should* be able to set > >it > > >to accept any SMTP traffic as long as it is mail destined for domains which > > >Imail accepts mail for. It's not that it reads Imail's mind, but you must > > >configure it for those particular domains. If you set it for Relay All > >Mail > > >(regardless of what Imail is set up as), you will be an open relay and > > >subsequently blacklisted. AS a result, your dial-up users will have more > > >problems than you want. I think you are getting confused.....that setting > > >has nothing to do with where your users are COMING FROM, but where the > >email > > >is SENT TO. Anyone (unless blocked via firewall) can connect to anyone's > > >SMTP server in the outside world. Whether I can send mail to your > >domain(s) > > >or some domain in Nigeria depends on whether your are relaying mail for > > >everyone or just your domains. Make sense? > > > > > >Travis > > > > > >-----Original Message----- > > >From: [EMAIL PROTECTED] > > >[mailto:[EMAIL PROTECTED] Behalf Of Kevin Stanford > > >Sent: Thursday, January 22, 2004 7:35 AM > > >To: [EMAIL PROTECTED] > > >Subject: RE: [IMail Forum] No mail relay/webshield for SMTP > > > > > > > > >My problem is I have users that use "dial-up" accounts with dynamic IP > > >addresses and it is becoming a real drag adding every subnet they are > > >coming from. Webshield does have an Anti-Spam relay setting that lets me > > >add the domain name..since this is the case would I put our email domain > > >name and then use no mail relay and clear the "Disable SMTP "VRFY" command? > > > > > >Kevin > > > > > >At 09:23 AM 01/22/2004, you wrote: > > > >This would cause you to be an open relay on the IP address via port 25 > >that > > > >Webshield Runs on unless there is something about webshield I don't know > > > >about. You can;t ocnfigure Webshield to accept mail only for those bound > > > >for domains xyz.com, abc.com, and whatever.net? > > > > > > > >Travis > > > > > > > >-----Original Message----- > > > >From: [EMAIL PROTECTED] > > > >[mailto:[EMAIL PROTECTED] Behalf Of Kevin Stanford > > > >Sent: Thursday, January 22, 2004 7:13 AM > > > >To: [EMAIL PROTECTED] > > > >Subject: [IMail Forum] No mail relay/webshield for SMTP > > > > > > > > > > > >I have Webshield for SMTP on the same box as Imail. Since mail comes in > >and > > > >hits Webshield first, If I allow mail relay on Webshield for SMTP but set > > > >Imail to No Mail Relay and clear the "Disable SMTP "VRFY" command will I > >be > > > >in good shape as far as not allowing unauthorized mail to be relayed > > > >through my server? > > > > > > > >Thanks, > > > > > > > >Kevin > > > > > > > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > > >List Archive: > >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > > > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > > >List Archive: > >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > > >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
