Hi list - calling all IIS experts!

I'm learning as I go with server configuration so bear with me while I stumble through my explanations and problems.

I'm having a bit of a pickle configuring my SMTP server to do what I want it to do. My SMTP server must serve 2 roles:
. to receive e-mail from anybody sending mail to our addresses
. to act as a mail relay for a specific authorised login, irrespective of its location or computer (it's from a CD-ROM project we're going to be distributing soon)

I can get either one of these functions working but I cannot configure the server to achieve both at once.

To receive e-mails from anybody, I allow anonymous access (set under Access Control in the Access tab) from all connections ("all except the list below" with an empty list, set under Connection Control in the Access tab). This, to my limited understanding, allows any mail server to connect to mine and transfer data. This works fine.

To act as a relay I allow access through the Windows security package *only* (set under Access Control in the Access tab) and blanket-block all locations ("only the list below" with an empty list), but allow all successfully authenticating computers to relay (set under Relay Restrictions in the Access tab). This also works fine.

The problem I now have is doing one of these things messes around the other.

Originally I used both anonymous access and Windows authentication, with all successfully authenticated computers allowed to relay, but I realised quickly that opened a huge security hole as an anonymous login would count as a successful authentication. 35 seconds later I was used as a relay for 17,000 spam e-mails.

I then turned off anonymous access and although the relay still worked fine using the authenticated user account from any connection, every other e-mail sent to our addresses bounced "sender was rejected: client was not authenticated".

I've gone through all the settings in the configuration and I cannot see what combination of settings will do what I want. As I want to receive e-mail from any computer I can't set an authorised or blocked computer list as this list will change all the time, however I can't seem to restrict relaying to a specific user account but allow connections from anywhere.

So, in a nutshell, sombody save me and tell me what to do!

Clear as mud? Thought so

MOU

        
        
                
___________________________________________________________ Yahoo! Messenger - NEW crystal clear PC to PC calling worldwide with voicemail http://uk.messenger.yahoo.com


____ • The WDVL Discussion List from WDVL.COM • ____
To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or
use the web interface http://e-newsletters.internet.com/discussionlists.html/
      Send Your Posts To: wdvltalk@lists.wdvl.com
To change subscription settings, add a password or view the web interface:
http://intm-dl.sparklist.com/read/?forum=wdvltalk

________________  http://www.wdvl.com  _______________________

You are currently subscribed to wdvltalk as: archive@jab.org
To unsubscribe send a blank email to [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to