I need to implement SPF, but under SPF, the only way to get mail out when "out of the office" appears to be Port 587 (Submission). I can't find any doc on opening this port to IMail Server. Nor can I find anything about using SPF records in IMail anti-spam settings.
Sadly IMail won't allow opening of a second listening port, so you have to do some trickery. What I did was to put a port redirector (FPipe) on our DNS server and set it to forward to port 25 on the IMail server, and used the old SRVANY utility to make it into an NT service.
The next part in this trick is that you don't want the port redirector to become an open relay. In my case, I altered the addresses permitted to relay from our entire subnet to the sixty or seventy addresses that are allocated to customer traffic. The DNS server is *not* one of those addresses, so if someone tries to relay mail through port 587 without SASL, they're going to get rejected.
The reason I put a port redirector on another server was because we have some roaming customers who may plug into our network, or any other network, and the settings I had on our Cisco router only worked from outside our network. Putting the redirector on our IMail box meant that messages would be incoming as 127.0.0.1, so it had to go on another machine on our server.
The only thing I've found with FPipe is that it locks up sometimes. I have a task that runs every 24 hours at 4am which restarts the FPipe service. It's a bit of legwork, but works like a charm. If I wasn't so busy, I'd probably compile SASL into our IMGate/Postfix box and do it through that, but that's a project for later this year.
Anyways, you can download FPipe from here: http://www.foundstone.com/resources/proddesc/fpipe.htm
-- A. Clausen [EMAIL PROTECTED]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
