One SMTP server (A) that accepts only authenticated sessions and allows relay for those. Another SMTP server (B) that accepts any session but does not allow relay.
The trick is to only have A listed as an MX record. B does *not* need to be listed as an MX record. Usually B is listed explicity (by DNS name) in the off-campus-client's email client as the "Sending Mail Server" or "SMTP Server" - no need to advertise it in DNS, though a portscanner will still find it.
Er, shouldn't that be the other way around? Or am I misreading?
Kelson Vibber
SpeedGate Communications <www.speed.net>
_______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

