Re: Configuring SMTP in IIS 6.0 Questions


"Sanford Whiteman" <swhitemanlistens-software@xxxxxxxxxxxxxxxxxxxxx> wrote
in message news:op.tzuert1x6c17zw@xxxxxxxxxxxxxxxxxxxxxxx
So it seems that the internal smtp virutal server fqdn needs to
match the DNS A record and PTR.

That is required for the PTR-HELO-A roundtrip, yes, but it is _not_
required to make every single outbound delivery.

The roundtrip gives you delivery insurance, cooperating with remote
anti-spam measures. But when a server does not employ those measures,
you can still deliver. I don't want to devalue it in any context,
since it is so vital, but the fact is that no MTA vendor that I know
of enforces it within a single-server setup. It is left to the admin
to know how to negotiate forward and reverse DNS properly for remote
servers.

Right now the name is like server1 and when it finds a domain that
is different it knows to deliver remotely.

'server1' is an invalid, non-RFC host name, so it should not be used.

You must use a valid FQHN at a public domain.

So let's throw a wrench in the fire and clarify something here. If
this same IIS SMTP virtual server is hosted at a colo and the server
name is billing and the SMTP server name is billing, I'm confused on
how to configure if the domain at the colo is the same as the domain
at our coroporate exchange server.

Very simple. Such setups exist at least by the tens of thousands.

The VS has the FQHN billing.example.com.

The Local (Default) domain is billing.example.com.

There is a Remote domain 'example.com' that has its 'Allow incoming
mail to be relayed to this domain' checkbox checked. The radio button
'Forward all mail to smart host' is checked, and the hostname
'exchange.example.com' is entered in the textbox.

N.B. at the VS level, do not allow relaying for everyone. This makes
you an open relay. You may allow relaying for authenticated sessions
and/or sessions from certain IP subnets, _plus_ you allow anonymous
sessions to relay only to your known Remote domains by using the
checkbox noted above.

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
------------------------------------


.

Loading