Re: More Authorization Questions

From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 08/23/04


Date: Mon, 23 Aug 2004 14:19:30 +1000

Evan,

We've been over this in your previous thread. Unless there is something
about your setup that you're not telling us, the configurations posted
previously will work.

Otherwise, can you tell us how you know that spammers are using your mail
server as an open relay?

Thanks

Cheers
Ken

"Evan" <grime@forbiddenninja.com> wrote in message
news:30a001c48710$e8a59a10$a301280a@phx.gbl...
>I am using SMTP Virutal Server for IIS in Windows Server
> 2003. Something else I should mention is the server is not
> in the DMZ. All of the correct ports are forwarded though
> (25 and 110). I went to 'Properties' on the Virtual Server
> and clicked the 'Access' tab. Then I added the IP ranges
> 192.168.0.0/255.255.255.0, 10.10.0.0/255.255.255.128, and
> 127.0.0.1 under the Relay Restrictions option. I've
> rebooted the server several times and it has not fixed the
> problem :(
>
>
>>-----Original Message-----
>>On Fri, 20 Aug 2004 06:59:00 -0700, "Evan"
> <grime@forbiddenninja.com>
>>wrote:
>>
>>>This doesn't make much sense to me.... Is it not
> possible
>>>to set my smtp service up so that it requires
>>>authentication, and yet still be able to receive emails
>>>from the outside world?
>>
>>No. If you want systems to authenticate, then you can't
> accept mail
>>from systems that don't authenticate.
>>
>>>If it's not possible that really
>>>makes for a hard decision. Do I want to leave my email
>>>server open for anonymous relay and have spammers use my
>>>server freely, or do I want to enforce authentication
> and
>>>not be able to receive any email from the outside world
>>>because the other email servers don't have authorization?
>>
>>You're confusing relaying with authenticating. They're
> not the same
>>thing.
>>
>>>I tried adding IP ranges to the Relay Restrictions list,
>>>but that didn't do any good. It's as if the SMTP service
>>>is ignoring that list when it decides whether or not to
>>>accept an email. What am I missing here?
>>
>>What OS and version of SMTP? I think you may be missing
> where to set
>>relay restrictions, but it may be a case of not stopping
> and
>>restarting the SMTP services.
>>
>>Jeff
>>.
>>



Relevant Pages

  • Re: Allowing Mail from an appliance &/or other Mail server
    ... this virtual server and restrict by the ip address for the security. ... accomplished by limiting which IP addresses can connect to your SMTP ... Outlook users do not need smtp connectivity to Exchange servers - they ... your smtp relay server configured to authenticate as well. ...
    (microsoft.public.exchange.connectivity)
  • Re: Mailer Error: Language string failed to load
    ... SMTP -> FROM SERVER: ... You're problem is you must authenticate yourself on this server before sending email. ... What you need to do is find out how Sprint requires you to authenticate. ...
    (comp.lang.php)
  • Re: Bad HELO and no authentication - please help
    ... Virtual Server" on the right. ... SMTP connections with, that you disable ... laptop get brought into the network with a SPAM trojan. ... Or some setting set that seems to require that source to authenticate. ...
    (microsoft.public.windows.server.sbs)
  • Re: remote authenticated SMTP
    ... users are connected via VPN. ... authenticate to relay, ... I would like them to be able to access our exchange server via the ... with IMAP and SMTP authenticated relaying. ...
    (microsoft.public.windows.server.sbs)
  • Re: SMTP using usernames & passwords.
    ... How can I stop non authenticated smtp access to the sever. ... clients accessing over pop to authenticate when they send email no ... You configure this on the client (by default the SMTP virtuel server ... the internet and local clients get a fail message when attempting to ...
    (microsoft.public.exchange.setup)