Re: An Open Relay query

[Frank Lazar <fmlazar@xxxxxxxxxxxxxxxxxx>]

On Jan 10, 2004, at 12:00 PM, Adrian Chapman wrote:

> On 10 Jan 2004, at 12:34, Erich Parzefall wrote:
>
> > can you show us your Restrict Mail Relaying-Page (as in the FAQ's)?
>
> In general, restrict relay mail except as indicated below (Checked)
>     Allow relay from these IP addresses  (Checked)
>                 192.168.254.0
>         127.0.0.1
>
>
> If relay mail is restricted as specified above, use the following 
> delivery options
>      Allow delivery to:
>         Local Mail domains (Checked)
>
>
> Local mail domains are:
> armageddon.plus.com
> slartibartfast.local
> therefuge.co.uk
>
>
> That is all I have entered in the Restrict Mail Relaying page.
> --
> Adrian

That's your problem right there.   mail domains can be easily forged 
Using this option will cause the server to fail the ORDB test. 
Instead of using mail domains go with the IP restrictions noted above 
and one or both of the following
2 options.


1.  Have everyone outside the IP address range either use their local 
SMTP server.  (If they're at a home connection, chances are that this 
will be their only option)

2.  Enable  POPbefore SMTP option.

>
Frank Lazar  Technical Manager
VMA Support Team
Copytone Visual Communications
fmlazar@xxxxxxxxxxxxxxxxxx
www.copytoneonline.com
Voice:    212-575-0235
Fax:        212-575-5682
Mobile:  646-220-0194

---------
Tenon Intersystems' Post.Office Mailing List
To unsubscribe: send mailto:post_office-request@xxxxxxxxxxxxxxx
with the body only containing: unsubscribe
Find the searchable mailing list archives at:
http://postoffice.computeroil.com/