Yes I had found this in the archives from David Gregg:
"FPIPE will work as long as you don't include the IP of the mailserver in the 'relay for addresses' list..."
But, would this affect the ability of the server to do webmail or cause some other problems
if the IP of the server is removed (actual ip or local address 12.0.0.1) from the relay list?
Thanks,
Gary
At 04:42 AM 1/24/2005, you wrote:
The Problem with the port redirectors is that the source adress of the connection is changed to the Server doing the redirect. If you do the redirect on a computer which IP is allowed to relay (eg. the server itself) then any SMTP connection going over this redirector is allowed even if it originates from an untrusted outside IP.
In the archives you will find more about this problem and suggested tools. http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Matti
> I have no interest or need for using NAT. We have thousands of IPs > available. I don't want to do a complete re IP on a machine with over a > hundred IPs on it. I have control over opening and closing ports on the > live IPs via routers & firewalls. I would just like to run a simple port > redirect program on the mail server that will send port 587 to port 25 and > be done with it. I know there are a few apps out there that will do this > and I was hoping to get some feedback on this method. Thanks for your > suggestions.
> Gary
> At 05:47 PM 1/23/2005, you wrote:
>>You might try working something out with your bandwidth provider so that
>>you could NAT your network. Mine does work on NAT, but I'm not a Cisco
>>expert so I don't know if there is another way to do this.
>>
>>Matt
>>
>>
>>
>>Gary Brumm wrote:
>>
>>>Hi Matt,
>>>
>>> Thanks for the reply. I have a main Cisco router where ports
>>> can be blocked as well as some hardware firewalls (Sonicwall) on
>>>various subnets. Port forwarding can be done if you are in NAT mode but
>>>these will not do a port redirection which is what I need.
>>>Each domain on the email server is on it's own live IP so NAT is not a
>>>solution for me. In any case I would never hang something a critical
>>>as an email server on a $50 Linksys router. It would be nice if you
>>>could add an alternate port in the IMail configuration but I wouldn't
>>>hold my breath for any solution from IPSwitch. I will probably need to
>>>use some software port redirection software on the email server
>>>itself. I was just trying to find out what others were using and what
>>>(if any) problems were created by doing this.
>>>
>>>Gary
>>>
>>>
>>>At 10:38 AM 1/23/2005, you wrote:
>>>
>>>>Unless you have a reason why you would want to use another piece of
>>>>software for validating addresses (very necessary these days), you are
>>>>probably going to want something that is software and does port
>>>>forwarding, but not another MTA of some sort. I don't know of any port
>>>>forwarding software that isn't some form of a firewall or proxy. Maybe
>>>>someone else knows better about what is available.
>>>>
>>>>I believe that you could get away with a really cheap standard Linksys
>>>>router if you weren't looking to spend a lot of cash, the config would
>>>>be somewhat of a kludge to have work properly, but I'm pretty sure it
>>>>can be done.. Lots of routers do port forwarding, so you don't
>>>>necessarily need a Cisco to pull this off if you wanted a more
>>>>straightforward solution. IMO, every Internet server should be behind a
>>>>port blocking router, otherwise you may very well end up hacked through
>>>>some open port exploit, so a router has many advantages besides this one thing.
>>>>
>>>>Matt
>>>>
>>>>
>>>>
>>>>
>>>>Gary Brumm wrote:
>>>>
>>>>>SBC just blocked port 25 for their dynamically assigned DSL users.
>>>>>I can have those users switch to SBC's SMTP servers but I have
>>>>>been meaning to open up port 587 for my users that travel. I was
>>>>>wondering what software solutions you guys have been using (like the
>>>>>ones suggested below) and if there are any problems associated with
>>>>>doing it via software on the IMail machine as opposed to doing it with
>>>>>a hardware firewall. If it is a software solution it must run as a service.
>>>>>
>>>>>Thanks,
>>>>>
>>>>>Gary
>>>>>
>>>>>
>>>>>At 09:38 AM 8/27/2004, you wrote:
>>>>>
>>>>>>[EMAIL PROTECTED] wrote:
>>>>>>
>>>>>>>Jim,
>>>>>>>If your firewall supports it, I'd suggest port remapping on the firewall.
>>>>>>>Have any port translated to IMail on port 25.
>>>>>>>You could achieve the same solution using a port redirector software
>>>>>>>on your IMail box.
>>>>>>>There is a bunch of Port Forwarder/Redirector Softwares available, e.g.
>>>>>>>PortTunnel by http://www.steelbytes.com/
>>>>>>>or
>>>>>>>Fpipe by
>>>>>>>http://www.foundstone.com/index.htm?subnav=resources/navigation.htm &subcontent=/resources/freetools.htm
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>I gave FPipe a shot, and while it does work, IMail sees the redirected
>>>>>>traffic as coming from itself, which will defeat my relaying setting.
>>>>>>While that may not be a problem at the moment, some time in that
>>>>>>not-so-distant future, some spammer may become clever enough to start
>>>>>>relaying traffic through port 587, and I will become an open relay.
>>>>>>
>>>>>>Is there a redirector that does preserve the source IP, or is that
>>>>>>even possible?
>>>>>>
>>>>>>--
>>>>>>A. Clausen
>>>>>>[EMAIL PROTECTED]
>>>>>>
>>>>>>
>>>>>>To Unsubscribe:
>>>>>>http://www.ipswitch.com/support/mailing-lists.html
>>>>>>List Archive:
>>>>>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>>>>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>>>>>
>>>>>
>>>>>
>>>>>ComsecNet
>>>>>Dedicated Data Services
>>>>>Stockton, CA
>>>>>Phone:(209) 463-2809
>>>>>Fax: (209) 938-0481
>>>>>Email: [EMAIL PROTECTED]
>>>>>Web: www.comsec.net
>>>>>
>>>>>This message is intended for the use of the individual or entity to
>>>>>which it is addressed and may contain information that is privileged,
>>>>>confidential, and exempt from disclosure under applicable law. If the
>>>>>reader of this message is not the intended recipient or an employee or
>>>>>agent responsible for delivering to the intended recipient, you are
>>>>>hereby notified that any dissemination, distribution or copying of this
>>>>>communication is strictly prohibited. If you have received this
>>>>>communication in error please destroy this message and notify the
>>>>>sender by reply email.
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>To Unsubscribe:
>>>>>http://www.ipswitch.com/support/mailing-lists.html
>>>>>List Archive:
>>>>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>>>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>>>>
>>>>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>>>>List Archive:
>>>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>>>
>>>
>>>ComsecNet
>>>Dedicated Data Services
>>>Stockton, CA
>>>Phone:(209) 463-2809
>>>Fax: (209) 938-0481
>>>Email: [EMAIL PROTECTED]
>>>Web: www.comsec.net
>>>
>>>This message is intended for the use of the individual or entity to which
>>>it is addressed and may contain information that is privileged,
>>>confidential, and exempt from disclosure under applicable law. If the
>>>reader of this message is not the intended recipient or an employee or
>>>agent responsible for delivering to the intended recipient, you are
>>>hereby notified that any dissemination, distribution or copying of this
>>>communication is strictly prohibited. If you have received this
>>>communication in error please destroy this message and notify the sender
>>>by reply email.
>>>
>>>
>>>
>>>
>>>
>>>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>>>List Archive:
>>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>>>
>>
>>To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>>List Archive:
>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> ComsecNet > Dedicated Data Services > Stockton, CA > Phone:(209) 463-2809 > Fax: (209) 938-0481 > Email: [EMAIL PROTECTED] > Web: www.comsec.net
> This message is intended for the use of the individual or entity to which > it is addressed and may contain information that is privileged, > confidential, and exempt from disclosure under applicable law. If the > reader of this message is not the intended recipient or an employee or > agent responsible for delivering to the intended recipient, you are hereby > notified that any dissemination, distribution or copying of this > communication is strictly prohibited. If you have received this > communication in error please destroy this message and notify the sender by > reply email.
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> -- > This message has been 'sanitized'. This means that potentially > dangerous content has been rewritten or removed. The following > log describes which actions were taken.
> Sanitizer (start="1106541334"): > SanitizeFile (filename="unnamed.txt", mimetype="text/plain"): > Match (names="unnamed.txt", rule="2"): > Enforced policy: accept
> Dropped empty MIME field: charset > Total modifications so far: 1
> Anomy 0.0.0 : Sanitizer.pm > $Id: Sanitizer.pm,v 1.79 2003/06/19 19:22:00 bre Exp $
> -- > Eingehende E-Mail ist virenfrei. > �berpr�ft durch AVG Antivirensystem. > Version: 7.0.302 / Virendatenbank: 265.7.2 - Ausgabedatum: 21.01.2005
- Matti Haack - Hit Haack IT Service Gmbh Neuburger Strasse 35, D-94032 Passau +49 851 50477-22 Fax: +49 851 50477-29 http://www.haack-it.de
Dieses Dokument ist ausschliesslich fuer den Adressaten bestimmt. Jegliche Art von Reproduktion, Verbreitung, Vervielfaeltigung, Modifikation, Verteilung und/oder Publikation dieser E-Mail-Nachricht ist untersagt, soweit dies nicht ausdruecklich genehmigt wurde. Jegliche Haftung f�r Ansprueche, die aufgrund der Kommunikation per E-Mail begruendet werden koennten, ist ausgeschlossen, soweit der Haftungsausschluss gesetzlich zulaessig ist.
-- Ausgehende E-Mail wurde auf Viren gescannt --
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
ComsecNet Dedicated Data Services Stockton, CA Phone:(209) 463-2809 Fax: (209) 938-0481 Email: [EMAIL PROTECTED] Web: www.comsec.net
This message is intended for the use of the individual or entity to which it is addressed and may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error please destroy this message and notify the sender by reply email.
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
