Effectively, it seems the "MailAuth" feature does not take into account the
'WhiteList' parameter in the smtp.ipprop.tab file.

But should it be the case as the smtp.ipprop.tab "Whitelist" is supposed to
be used to change ip checks ?

Davide ? any idea ?
IMOO another smtp.ipprop.tab parameter like "MailAuth=0" should be created
(to not change/mix 'ip checks' rules)

For now, Hal, I think you could use your firewall to block any 'external'
attempts to go to you Postini dedicated xmail server ip and ports ;)

Francis



-----Message d'origine-----
De: [EMAIL PROTECTED]
A: [email protected]
Date: 23/04/08 05:57
Objet: [xmail] Re: Lockdown xMail 

 
Dear Clement Francis / Davide -

> First at all xmail doc for smtp.ipprop.tab syntax says :
>  "Address selection mask are formed by an IP address
> (network) plus the number of valid bits inside the network mask"
> [...snip...]
> "96.227.65.4/32"      "WhiteList=1"

Yes, I was wondering if the parser would just assume that without
the slash it figure out that was were referencing a single node.

Well, I made the above change and it still does NOT work; in
other words I still get the "551 Server use forbidden" error message.

Also, tested the xMail server against my local IP (10.0.0.25),
as I have a VPN connection to the eMail server as well and that
did NOT work as well.

And the answer is YES, when I test the 96. address I dropped
the VPN tunnel before testing.

I also thought of another idea to determine if xMail returns the
correct data.... I performed the following command:

ctrlclnt -s XX.XX.XX.XX -n XXXX -u Y -p Z cfgfileget smtp.ipprop.tab

The command line program returned:

"10.0.0.0/16"   "WhiteList=1"
"64.18.0.0/20"  "WhiteList=1"
"96.227.65.4/32"        "WhiteList=1"

Unless you have any further suggestions... What is our next step?

Thanks,
Hal Dell
ePodWorks.net, Inc.
Managing Partner

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to