More Authorization Questions
From: Joe (jspadea_at_massbusiness.com)
Date: 08/20/04
- Previous message: Jeff Cochran: "Re: More Authorization Questions"
- In reply to: Joe: "More Authorization Questions"
- Next in thread: Kristofer Gafvert: "Re: More Authorization Questions"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 20 Aug 2004 10:51:54 -0700
Authentication: I have all three methods of
authentication turned on.
Connection: All except list below - nothing in list
Relay Restrictions: Only the list below - which has the
IPs; allow all computers which succesfully authenticate to
relay is Checked.
Now I remember the problems I ran into:
All smtp traffic (port 25) was blocked between the allowed
IP's and the email server (someone installed a firewall
and blocked port 25 in order to combat worms and
zombies). This doesn't sound related to your problem -
although you might want to make sure you can telnet to
port 25 on your mail server from inside your network.
The large IP ranges didn't seem to work - although I can't
recall confirming the problem. I replaced the large
ranges with a bunch of small blocks: x.x.x.1
(255.255.255.0) Then I rebooted and then everything
worked properly.
Hope this helps.
Joe
btw- exchange's Queue management might be worth the
switch, but I'm sure you'll need to solve this problem
first.
>Sent: Friday, August 20, 2004 12:51 PM
>Subject: SMTP Auth Help
>I tried rebooting the server, and that didn't seem to fix
>it. The server is running windows server 2003 enterprise
>edition. It is also behind the firewall. Do I need to put
>it in the DMZ for this to work properly? If I do, I'm
>just going to go ahead and get another computer and put
>Exchange on it. Thanks for the help.
>-----Original Message-----
>It must be possible - I've had 4 Exchange 2000 servers
set
>up this way for years.
>
>I seem to remember the problem you are having. I believe
>those IP addresses that you are allowing will only take
>effect after a reboot. If that doesn't work for you,
>email me and I will connect to my server and poke around.
>
>
>>-----Original Message-----
>>This doesn't make much sense to me.... Is it not
possible
>>to set my smtp service up so that it requires
>>authentication, and yet still be able to receive emails
>>from the outside world? If it's not possible that really
>>makes for a hard decision. Do I want to leave my email
>>server open for anonymous relay and have spammers use my
>>server freely, or do I want to enforce authentication
and
>>not be able to receive any email from the outside world
>>because the other email servers don't have
authorization?
>>I tried adding IP ranges to the Relay Restrictions list,
>>but that didn't do any good. It's as if the SMTP service
>>is ignoring that list when it decides whether or not to
>>accept an email. What am I missing here?
>>.
>>
>.
>
- Previous message: Jeff Cochran: "Re: More Authorization Questions"
- In reply to: Joe: "More Authorization Questions"
- Next in thread: Kristofer Gafvert: "Re: More Authorization Questions"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|