Re: [IMail Forum] Imail Listserv

2001-11-14 Thread jcochran

Great, thanks.  That's the kind of thing I was looking for.  I'm 
gradually finding that iMail is fairly powerful if you use the supplied 
utilities, but that documentation for those is sometimes lacking.

Jeff

 if you have setup the subscribe@ and unsubscribe@ functionality for
 your list - then these scrpits shoul work...
 http://globalweb.net/members/support/email/listserver/listadd-options.
 asp

 Randy Armbrecht
 Global Web Solutions, Inc.
 (804) 346.5300 x102
 (877) 800.GLOBAL (4562) x102
 http://globalweb.net
 - Original Message -
 From: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Tuesday, November 13, 2001 11:12 AM
 Subject: Re: [IMail Forum] Imail Listserv
 
 
   Why has Imail not done anything to improve its listserv/imailserv?
 
  On another note, has anyone got an ASP-based front end for
  subscribing and unsubscribing from lists, especially with
  confirmation capabilities?  Our largest lists are a couple hundred
  subscibers mailed to once a month or so, so Imail is doing fine, but
  we don't have the capabilities I'd like from a list server.
 
  Thanks,
 
  Jeff
 
  Please visit http://www.ipswitch.com/support/mailing-lists.html to
  be removed from this list.
 
  An Archive of this list is available at:
  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 
 
 
 
 Please visit http://www.ipswitch.com/support/mailing-lists.html 
 to be removed from this list.
 
 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] Trailer.txt for a specific domain.

2001-11-14 Thread Kami Razvan

Hi:
Thanks for the reply-- Just a quick question about the topic again.

We host a number of virtual domains and we want to put a trailer only
for one of these domains.  According to the IPSwitch site- 


Question/Problem: Is it possible to include a footnote in every e-mail
sent by any user, like thanks for using IMail? 

Answer/Solution: If you create a text file named trailer.txt in the
\imail directory it will be appended to all outgoing messages.

Please note: the trailer is not appended to messages sent locally (to
other mailboxes on your IMail server). Also, mail clients may not see
the trailer if it is appended to HTML formatted messages. Set your mail
client to use Plain Text (that is, the Content-Type will be text/plain).
--

If we add this to the Imail directory- would it not then send it to all
domains?  


Regards,
Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Sanford
Whiteman
Sent: Tuesday, November 13, 2001 8:08 PM
To: Balaji
Subject: Re[2]: [IMail Forum] Messages at the bottom of emails


That would be:

trailer.txt

Just a little correction,

Sandy


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



smime.p7s
Description: application/pkcs7-signature


[IMail Forum] Sending attachments

2001-11-14 Thread Annette Smith

I have a user who is unable to send attachments.  She selects Attachments,
browses to the file that she wants to attach and then clicks the attach
button, but the attachment never appears in the attachment list.  

Annette Smith
Network Administrator
TReND
610-783-4650 x107


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Sending attachments

2001-11-14 Thread R. Scott Perry


I have a user who is unable to send attachments.  She selects Attachments,
browses to the file that she wants to attach and then clicks the attach
button, but the attachment never appears in the attachment list.

What mail client is she using?

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] Sending attachments

2001-11-14 Thread Annette Smith

She is using the web messaging.  I'm able to attach a file fine, but this
particular user is unable.

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 8:53 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Sending attachments



I have a user who is unable to send attachments.  She selects Attachments,
browses to the file that she wants to attach and then clicks the attach
button, but the attachment never appears in the attachment list.

What mail client is she using?

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] Sending attachments

2001-11-14 Thread Christopher Byrd

What you need to do is go into her folder on the server and delete a file
with a .tmp extension.  It will probably look something like
W~username.tmp  After you delete this file, she will be able to attach
files.

Chris

-Original Message-
From: Annette Smith [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 9:05 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Sending attachments


She is using the web messaging.  I'm able to attach a file fine, but this
particular user is unable.

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 8:53 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Sending attachments



I have a user who is unable to send attachments.  She selects Attachments,
browses to the file that she wants to attach and then clicks the attach
button, but the attachment never appears in the attachment list.

What mail client is she using?

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] Sending attachments

2001-11-14 Thread Annette Smith

I tried to do this and when I try to delete this .tmp file I get a sharing
violation error.  Do I need to stop a service first before doing this?

-Original Message-
From: Christopher Byrd [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 9:20 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Sending attachments


What you need to do is go into her folder on the server and delete a file
with a .tmp extension.  It will probably look something like
W~username.tmp  After you delete this file, she will be able to attach
files.

Chris

-Original Message-
From: Annette Smith [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 9:05 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Sending attachments


She is using the web messaging.  I'm able to attach a file fine, but this
particular user is unable.

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, November 14, 2001 8:53 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Sending attachments



I have a user who is unable to send attachments.  She selects Attachments,
browses to the file that she wants to attach and then clicks the attach
button, but the attachment never appears in the attachment list.

What mail client is she using?

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] Unable to execute

2001-11-14 Thread Stefano Brozzoni

There is some security problems I think in version 7.0 that i can't create
an account in an asp page using adduser.exe prompt by an asp object like
Dynu.Exec or
AspExec.

It's about 2 years that i use this code to create an account:

  string = c:\Imail\adduser.exe -h match-love.com -u username

  Set myexec = Server.Createobject(Dynu.Exec)
  Response.Write(myexec.execute(string)  br)
  Set myexec = nothing

and this is the response:
ERR: failed to add username on match-love.com

If I execute the same string at Ms-Dos command prompt it do right
but not using the same command in an asp page.

.??!!! Why??
Please could you find the answer?

Thanks!
Stefano


- Original Message -
From: Christopher Byrd [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 3:19 PM
Subject: RE: [IMail Forum] Sending attachments


 What you need to do is go into her folder on the server and delete a file
 with a .tmp extension.  It will probably look something like
 W~username.tmp  After you delete this file, she will be able to attach
 files.

 Chris

 -Original Message-
 From: Annette Smith [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, November 14, 2001 9:05 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [IMail Forum] Sending attachments


 She is using the web messaging.  I'm able to attach a file fine, but this
 particular user is unable.

 -Original Message-
 From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, November 14, 2001 8:53 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] Sending attachments



 I have a user who is unable to send attachments.  She selects
Attachments,
 browses to the file that she wants to attach and then clicks the attach
 button, but the attachment never appears in the attachment list.

 What mail client is she using?

 -Scott
 ---
 Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
 IMail.  http://www.declude.com


 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] How do I extract user names and email addresses for import inOE?

2001-11-14 Thread Brad Pollina



The President of our company wants to have each and every email address in 
our company put into his contact list. Since we add and delete people all 
the time, we don't have a written record of every account we have. Is there 
a way in imail to get it to give you output that I could then import into 
the contact database? Our imail is outsourced, so I don't have direct 
access to the box itself, but they have given us access to ALIASES, so if 
there is some way I can put it in there it would be great. I wish I had 
time to read the digest every day, but I'm just too busy being the sole PC 
anything for an end user base of 250 (I do all the servers, the internet, 
the PC break/fix, help desk, training...anything PC!) so if you would email 
me suggestions to [EMAIL PROTECTED] it would be appreciated. Thanks in 
advance for your help!


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] How do I extract user names and email addresses for import in OE?

2001-11-14 Thread Les Bevan

try importing from the LDAP server.


- Original Message -
From: Brad Pollina [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 2:45 PM
Subject: [IMail Forum] How do I extract user names and email addresses for
import in OE?




 The President of our company wants to have each and every email address in
 our company put into his contact list. Since we add and delete people all
 the time, we don't have a written record of every account we have. Is
there
 a way in imail to get it to give you output that I could then import into
 the contact database? Our imail is outsourced, so I don't have direct
 access to the box itself, but they have given us access to ALIASES, so if
 there is some way I can put it in there it would be great. I wish I had
 time to read the digest every day, but I'm just too busy being the sole PC
 anything for an end user base of 250 (I do all the servers, the internet,
 the PC break/fix, help desk, training...anything PC!) so if you would
email
 me suggestions to [EMAIL PROTECTED] it would be appreciated. Thanks in
 advance for your help!


 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] How do I extract user names and email addresses for import in OE?

2001-11-14 Thread Evans Martin

Check out our product.  http://iplus.martek.net.  You're looking for IPlus
Info Browser.

Thanks,
Evans Martin


- Original Message -
From: Brad Pollina [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 8:45 AM
Subject: [IMail Forum] How do I extract user names and email addresses for
import in OE?




 The President of our company wants to have each and every email address in
 our company put into his contact list. Since we add and delete people all
 the time, we don't have a written record of every account we have. Is
there
 a way in imail to get it to give you output that I could then import into
 the contact database? Our imail is outsourced, so I don't have direct
 access to the box itself, but they have given us access to ALIASES, so if
 there is some way I can put it in there it would be great. I wish I had
 time to read the digest every day, but I'm just too busy being the sole PC
 anything for an end user base of 250 (I do all the servers, the internet,
 the PC break/fix, help desk, training...anything PC!) so if you would
email
 me suggestions to [EMAIL PROTECTED] it would be appreciated. Thanks in
 advance for your help!


 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Chuck Schick

We have a couple of domains that presently use a MS SQL database.   It
appears that we need to convert these to the Imail database - since Imail's
SMTP AUTH will not work with external databases for IPless domains.

Has anyone done this before and if so what are the steps?  I have searched
the knowledge base and have not come up with anything useful.

A small rant - The inability for IMail to perform SMTP authenicate with
IPless domains against an external database is a MAJOR FLAW - it sticks one
with having to burn an IP with every domain or mixing Imail database and the
external database.

Chuck Schick
Warp 8, Inc.
www.warp8.com
303-421-5140




Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] iMail on different server

2001-11-14 Thread Eric Johnson


My web server and my mail server are two different machines.  I want to use 
a plugin that lets you sign up users for e-mail account automatically over 
the web.  My problem is that it looks like the perl script that does part 
of the mailing (imailsrv.pl) wants to be on the same machine as the mail 
server.  Is there a way that I can tell imailsrv.pl that it is not on the 
same machine as the mail server but go to this address to look for it?
 Thanks for your help,


Eric Johnson


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] max attachment size?

2001-11-14 Thread Jim Jones, Jr.

any ideas ?

Jim
- Original Message -
From: Jim Jones, Jr. [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 13, 2001 10:42 PM
Subject: [IMail Forum] max attachment size?


 How can I limit the max size of attachments sent using smtp.  I have found
a
 way with webmail, but can't seem to find a way to do it otherwise.  Is
this
 even possible? ... Oh, I'm running 7.04 hotfix2

 Thanks,

 Jim


 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] What does this mean in my sys.txt

2001-11-14 Thread Mike Lewinski


- Original Message -
From: florida.com [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, November 13, 2001 4:02 PM
Subject: [IMail Forum] What does this mean in my sys.txt


 11:13 17:40 732   LST imailsrv-[EMAIL PROTECTED] Illegal IMail List
 Server Command!

Somebody probably sent spam to [EMAIL PROTECTED]

Or they sent a message saying list somelist but you've disabled that
command.

Mike




Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Bubba Smith

If anybody has any suggestions on how to handle this I would be very
appreciated.
We are using Imail 7.x and have around 100 domains.  We are a small ISP
providing web hosting and email services for small to medium size
businesses.

Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.  The person was able to
relay mail through our system by changing his computer name to a domain name
in IMail, and creating an email account on his computer the same as an email
account in one of our Imail domains.  Since IMail was setup for RELAY FOR
USERS ONLY, everything worked correctly.  Even if we had setup IMail relay
for HOSTS ONLY, the same thing would have occurred.  We tried the NO RELAY
option, but unfortunately, since the accept.txt file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
doesn't.  Accept.txt  only works for HOSTS and USERS only.  If accept.txt
did work for NO RELAY, we could put the IP addresses of our internal systems
in this file, and all users would then be required to use SMTP
Authentication.  Problem Solved.

I'm a little upset about this because it was pretty simple for this person
to do this and if any person reading this email uses NO RELAY for HOSTS or
USERS, you are also susceptible to this relaying as well.

So what does one do ?
Please help !!!

Sincerely,
B. Williams.




Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] SQL problem

2001-11-14 Thread Sergio Rincón J .



Hi there:

Well, im running Imail Server 7.04 HF2 and i have 
an external database for my users (1 users in SQL database). The thing is 
that in imail V. 5.06 the database worked fine, it tooked out like 1 minute to 
load it and then no problem, but in Version 7, the database takes like 5 minutes 
to appear and then suddenly more users start to appear between the ones that 
have already appeared and its almost impossible to edit the users.

Well, thanks for your help.


Sergio Rincon


RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Todd Holt

You can do exactly what your asking for, but you need to set it up a little
differently:

- Set your relay options to: Relay for Addresses
- Press the Addresses button and enter your internal systems (you only need
to include to servers that cannot do SMTP AUTH and which need to send SMTP)
- Set all clients to use SMTP AUTH

REMEMBER: The only safe relays options are no relay and relay for
addresses.

Using relay for users allows user spoofing and will get you on the RBLs
very quickly (as you have experienced).

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bubba Smith
Sent: Wednesday, November 14, 2001 10:46 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] SMTP Relay. What can we do better.


If anybody has any suggestions on how to handle this I would be very
appreciated.
We are using Imail 7.x and have around 100 domains.  We are a small ISP
providing web hosting and email services for small to medium size
businesses.

Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.  The person was able to
relay mail through our system by changing his computer name to a domain name
in IMail, and creating an email account on his computer the same as an email
account in one of our Imail domains.  Since IMail was setup for RELAY FOR
USERS ONLY, everything worked correctly.  Even if we had setup IMail relay
for HOSTS ONLY, the same thing would have occurred.  We tried the NO RELAY
option, but unfortunately, since the accept.txt file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
doesn't.  Accept.txt  only works for HOSTS and USERS only.  If accept.txt
did work for NO RELAY, we could put the IP addresses of our internal systems
in this file, and all users would then be required to use SMTP
Authentication.  Problem Solved.

I'm a little upset about this because it was pretty simple for this person
to do this and if any person reading this email uses NO RELAY for HOSTS or
USERS, you are also susceptible to this relaying as well.

So what does one do ?
Please help !!!

Sincerely,
B. Williams.




Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Rod Dorman

Bubba Smith wrote:
  ...
 Last week, a person was able to relay 300,000 emails through our Imail
 server. Our current relay is setup for USERS only.  The person was able to
 relay mail through our system by changing his computer name to a domain name
 in IMail, and creating an email account on his computer the same as an email
 account in one of our Imail domains.  Since IMail was setup for RELAY FOR
 USERS ONLY, everything worked correctly.

A prime example of why 'Relay for local users only' is a bad choice.

  Even if we had setup IMail relay
 for HOSTS ONLY, the same thing would have occurred.  We tried the NO RELAY
 option, but unfortunately, since the accept.txt file does not work for NO
 RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
 third party applications like FrontPage etc... cannot use SMTP
 Authentication.

 It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
 doesn't.  Accept.txt  only works for HOSTS and USERS only.  If accept.txt
 did work for NO RELAY, we could put the IP addresses of our internal systems
 in this file, and all users would then be required to use SMTP
 Authentication.  Problem Solved.

So use 'Relay mail for Addresses' and enter the subnet or individual
addresses your internal systems are on.

--
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. – Ambassador Kosh


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Jeff Reinhardt

What version of IMail are you running?

Jeff


- Original Message -
From: Chuck Schick [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 11:18 AM
Subject: [IMail Forum] Switching from an External to the Imail database!!!


 We have a couple of domains that presently use a MS SQL database.   It
 appears that we need to convert these to the Imail database - since
Imail's
 SMTP AUTH will not work with external databases for IPless domains.

 Has anyone done this before and if so what are the steps?  I have searched
 the knowledge base and have not come up with anything useful.

 A small rant - The inability for IMail to perform SMTP authenicate with
 IPless domains against an external database is a MAJOR FLAW - it sticks
one
 with having to burn an IP with every domain or mixing Imail database and
the
 external database.

 Chuck Schick
 Warp 8, Inc.
 www.warp8.com
 303-421-5140




 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread R. Scott Perry


Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.

So you were allowing him to send spam.

The person was able to relay mail through our system by changing his computer
name to a domain name in IMail, and creating an email account on his computer
the same as an email account in one of our Imail domains.

No, it's not nearly that difficult.  In their spamware, when asked What 
address do you want listed as the sender of the E-mail, they just entered 
[EMAIL PROTECTED].  No changing of computer names, no creating E-mail 
accounts, no hacking involved.

Since IMail was setup for RELAY FOR USERS ONLY, everything worked correctly.

That's correct.  Relay for users means that you will let anyone relay if 
they have an account on your server, or are willing to use an E-mail 
address on your server.

Even if we had setup IMail relay for HOSTS ONLY, the same thing would have 
occurred.

Quite true.  Relay for hosts means that anyone can relay mail through 
your server if they have an account on your server, or are willing to use a 
made-up E-mail address on your server.

  We tried the NO RELAY option, but unfortunately, since the accept.txt 
 file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

With No Mail Relay, you don't use accept.txt -- it means that everyone 
has to use SMTP AUTH.

Relay for Addresses does what you are looking for (although you don't use 
the accept.txt file, you use the button next to Relay for Addresses to 
list the safe IP addresses.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
doesn't.

No.  No mail relay really means Only relay for people using SMTP 
AUTH.  If IMail let certain users bypass it, then it would be Relay for 
Addresses (which it already has).

I'm a little upset about this because it was pretty simple for this person
to do this ...

The problem is that IMail doesn't make it clear that several of their 
anti-relay options don't prevent spammers from using your mail server.  The 
Relay for Users option isn't designed to stop spammers.

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Bubba Smith

What about our customers ?
Do I then have to put in each of their IPaddresses from where they will be
coming from ?
Some of them use DHCP from their ISP or cable service.
Thank you for your reply.
B.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Rod Dorman
Sent: Wednesday, November 14, 2001 9:11 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Bubba Smith wrote:
  ...
 Last week, a person was able to relay 300,000 emails through our Imail
 server. Our current relay is setup for USERS only.  The person was able to
 relay mail through our system by changing his computer name to a domain
name
 in IMail, and creating an email account on his computer the same as an
email
 account in one of our Imail domains.  Since IMail was setup for RELAY FOR
 USERS ONLY, everything worked correctly.

A prime example of why 'Relay for local users only' is a bad choice.

  Even if we had setup IMail relay
 for HOSTS ONLY, the same thing would have occurred.  We tried the NO RELAY
 option, but unfortunately, since the accept.txt file does not work for NO
 RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
 third party applications like FrontPage etc... cannot use SMTP
 Authentication.

 It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
 doesn't.  Accept.txt  only works for HOSTS and USERS only.  If accept.txt
 did work for NO RELAY, we could put the IP addresses of our internal
systems
 in this file, and all users would then be required to use SMTP
 Authentication.  Problem Solved.

So use 'Relay mail for Addresses' and enter the subnet or individual
addresses your internal systems are on.

--
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. – Ambassador Kosh


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread [EMAIL PROTECTED]

We're currently using a SQL database for one of our clients in Imail with
SMTP authentication.  This did not work until we upgraded to the 7.0x
version of Imail, but since then it seems to be working just fine.

Mike

- Original Message -
From: Chuck Schick [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 11:18 AM
Subject: [IMail Forum] Switching from an External to the Imail database!!!


 We have a couple of domains that presently use a MS SQL database.   It
 appears that we need to convert these to the Imail database - since
Imail's
 SMTP AUTH will not work with external databases for IPless domains.

 Has anyone done this before and if so what are the steps?  I have searched
 the knowledge base and have not come up with anything useful.

 A small rant - The inability for IMail to perform SMTP authenicate with
 IPless domains against an external database is a MAJOR FLAW - it sticks
one
 with having to burn an IP with every domain or mixing Imail database and
the
 external database.

 Chuck Schick
 Warp 8, Inc.
 www.warp8.com
 303-421-5140




 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/




Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Matthew Kiessling

I want to do this but...

I already have 4000+ users who I would have to reconfigure on the client
side.  Is there another way to get around this limitation?  I have seen
a product called Declude which is supposed to support this on Imail
anyone have any opinions on it?

Thanks

---Matt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Todd Holt
Sent: Wednesday, November 14, 2001 11:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


You can do exactly what your asking for, but you need to set it up a
little
differently:

- Set your relay options to: Relay for Addresses
- Press the Addresses button and enter your internal systems (you only
need to include to servers that cannot do SMTP AUTH and which need to
send SMTP)
- Set all clients to use SMTP AUTH

REMEMBER: The only safe relays options are no relay and relay for
addresses.

Using relay for users allows user spoofing and will get you on the
RBLs very quickly (as you have experienced).

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bubba Smith
Sent: Wednesday, November 14, 2001 10:46 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] SMTP Relay. What can we do better.


If anybody has any suggestions on how to handle this I would be very
appreciated. We are using Imail 7.x and have around 100 domains.  We are
a small ISP providing web hosting and email services for small to medium
size businesses.

Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.  The person was able
to relay mail through our system by changing his computer name to a
domain name in IMail, and creating an email account on his computer the
same as an email account in one of our Imail domains.  Since IMail was
setup for RELAY FOR USERS ONLY, everything worked correctly.  Even if we
had setup IMail relay for HOSTS ONLY, the same thing would have
occurred.  We tried the NO RELAY option, but unfortunately, since the
accept.txt file does not work for NO RELAY, none of our emails from
WhatsUP Gold could be sent, and some of our third party applications
like FrontPage etc... cannot use SMTP Authentication.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
doesn't.  Accept.txt  only works for HOSTS and USERS only.  If
accept.txt did work for NO RELAY, we could put the IP addresses of our
internal systems in this file, and all users would then be required to
use SMTP Authentication.  Problem Solved.

I'm a little upset about this because it was pretty simple for this
person to do this and if any person reading this email uses NO RELAY for
HOSTS or USERS, you are also susceptible to this relaying as well.

So what does one do ?
Please help !!!

Sincerely,
B. Williams.




Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Where are the Archives?

2001-11-14 Thread Alan Walters

I've recently noticed that the Archives stored at 
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ no longer appear to be 
accumulating anything.  The last
completed entries in the Archive are from October 5th, with a handful from October 
17th and 19th.  Did some 'helpful' person unsubscribe this List from the Archive
service?

Alan Walters
Director of I.T.
Royce Medical

Virus and worry free with Declude  McAfee NetShield


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Bubba Smith

Never thought of that.
Thank you Todd !!
Thank you Rod !! (previous post)

B.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Todd Holt
Sent: Wednesday, November 14, 2001 8:57 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


You can do exactly what your asking for, but you need to set it up a little
differently:

- Set your relay options to: Relay for Addresses
- Press the Addresses button and enter your internal systems (you only need
to include to servers that cannot do SMTP AUTH and which need to send SMTP)
- Set all clients to use SMTP AUTH

REMEMBER: The only safe relays options are no relay and relay for
addresses.

Using relay for users allows user spoofing and will get you on the RBLs
very quickly (as you have experienced).

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bubba Smith
Sent: Wednesday, November 14, 2001 10:46 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] SMTP Relay. What can we do better.


If anybody has any suggestions on how to handle this I would be very
appreciated.
We are using Imail 7.x and have around 100 domains.  We are a small ISP
providing web hosting and email services for small to medium size
businesses.

Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.  The person was able to
relay mail through our system by changing his computer name to a domain name
in IMail, and creating an email account on his computer the same as an email
account in one of our Imail domains.  Since IMail was setup for RELAY FOR
USERS ONLY, everything worked correctly.  Even if we had setup IMail relay
for HOSTS ONLY, the same thing would have occurred.  We tried the NO RELAY
option, but unfortunately, since the accept.txt file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
doesn't.  Accept.txt  only works for HOSTS and USERS only.  If accept.txt
did work for NO RELAY, we could put the IP addresses of our internal systems
in this file, and all users would then be required to use SMTP
Authentication.  Problem Solved.

I'm a little upset about this because it was pretty simple for this person
to do this and if any person reading this email uses NO RELAY for HOSTS or
USERS, you are also susceptible to this relaying as well.

So what does one do ?
Please help !!!

Sincerely,
B. Williams.




Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Rod Dorman

Bubba Smith wrote:
 What about our customers ?
 Do I then have to put in each of their IPaddresses from where they will be
 coming from ?
 Some of them use DHCP from their ISP or cable service.

They need to authenticate themselves with SMTP AUTH.

Details vary depending on the email client they use but basically the client
is configured to 'login' to the server.

--
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. – Ambassador Kosh


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Matthew Kiessling

I agree that Relay for Users only is a bad choice but can it also be
used in conjunction w/ relay for addresses?

I have seen SPAM come through my mail server with a spoofed address but
a bad domain name.  If I force mail to have a legitimate IP address and
Domain name I think I could further reduce any SPAM from getting out of
my server.

---Matt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Rod Dorman
Sent: Wednesday, November 14, 2001 12:11 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Bubba Smith wrote:
  ...
 Last week, a person was able to relay 300,000 emails through our Imail

 server. Our current relay is setup for USERS only.  The person was 
 able to relay mail through our system by changing his computer name to

 a domain name in IMail, and creating an email account on his computer 
 the same as an email account in one of our Imail domains.  Since IMail

 was setup for RELAY FOR USERS ONLY, everything worked correctly.

A prime example of why 'Relay for local users only' is a bad choice.

  Even if we had setup IMail relay
 for HOSTS ONLY, the same thing would have occurred.  We tried the NO 
 RELAY option, but unfortunately, since the accept.txt file does not 
 work for NO RELAY, none of our emails from WhatsUP Gold could be sent,

 and some of our third party applications like FrontPage etc... cannot 
 use SMTP Authentication.

 It would be nice if the ACCEPT.TXT file would worked for NO RELAY but 
 it doesn't.  Accept.txt  only works for HOSTS and USERS only.  If 
 accept.txt did work for NO RELAY, we could put the IP addresses of our

 internal systems in this file, and all users would then be required to

 use SMTP Authentication.  Problem Solved.

So use 'Relay mail for Addresses' and enter the subnet or individual
addresses your internal systems are on.

--
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. - Ambassador Kosh


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Chuck Schick

We are running 5.08.

Chuck Schick
Warp 8, Inc.
www.warp8.com
303-421-5140
- Original Message -
From: Jeff Reinhardt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 10:33 AM
Subject: Re: [IMail Forum] Switching from an External to the Imail
database!!!


: What version of IMail are you running?
:
: Jeff
:
:
: - Original Message -
: From: Chuck Schick [EMAIL PROTECTED]
: To: [EMAIL PROTECTED]
: Sent: Wednesday, November 14, 2001 11:18 AM
: Subject: [IMail Forum] Switching from an External to the Imail database!!!
:
:
:  We have a couple of domains that presently use a MS SQL database.   It
:  appears that we need to convert these to the Imail database - since
: Imail's
:  SMTP AUTH will not work with external databases for IPless domains.
: 
:  Has anyone done this before and if so what are the steps?  I have
searched
:  the knowledge base and have not come up with anything useful.
: 
:  A small rant - The inability for IMail to perform SMTP authenicate with
:  IPless domains against an external database is a MAJOR FLAW - it sticks
: one
:  with having to burn an IP with every domain or mixing Imail database and
: the
:  external database.
: 
:  Chuck Schick
:  Warp 8, Inc.
:  www.warp8.com
:  303-421-5140
: 
: 
: 
: 
:  Please visit http://www.ipswitch.com/support/mailing-lists.html
:  to be removed from this list.
: 
:  An Archive of this list is available at:
:  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
: 
:
:
: Please visit http://www.ipswitch.com/support/mailing-lists.html
: to be removed from this list.
:
: An Archive of this list is available at:
: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
:


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Jeff Reinhardt

Chuck,

We are upgrading from 6.06 to 7.04 because in 7.04 you can use
SMTP Auth with an external database, not sure if that is even an
option for you.

Jeff


- Original Message -
From: Chuck Schick [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 3:33 PM
Subject: Re: [IMail Forum] Switching from an External to the Imail
database!!!


 We are running 5.08.

 Chuck Schick
 Warp 8, Inc.
 www.warp8.com
 303-421-5140
 - Original Message -
 From: Jeff Reinhardt [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, November 14, 2001 10:33 AM
 Subject: Re: [IMail Forum] Switching from an External to the Imail
 database!!!


 : What version of IMail are you running?
 :
 : Jeff
 :
 :
 : - Original Message -
 : From: Chuck Schick [EMAIL PROTECTED]
 : To: [EMAIL PROTECTED]
 : Sent: Wednesday, November 14, 2001 11:18 AM
 : Subject: [IMail Forum] Switching from an External to the Imail
database!!!
 :
 :
 :  We have a couple of domains that presently use a MS SQL database.   It
 :  appears that we need to convert these to the Imail database - since
 : Imail's
 :  SMTP AUTH will not work with external databases for IPless domains.
 : 
 :  Has anyone done this before and if so what are the steps?  I have
 searched
 :  the knowledge base and have not come up with anything useful.
 : 
 :  A small rant - The inability for IMail to perform SMTP authenicate
with
 :  IPless domains against an external database is a MAJOR FLAW - it
sticks
 : one
 :  with having to burn an IP with every domain or mixing Imail database
and
 : the
 :  external database.
 : 
 :  Chuck Schick
 :  Warp 8, Inc.
 :  www.warp8.com
 :  303-421-5140
 : 
 : 
 : 
 : 
 :  Please visit http://www.ipswitch.com/support/mailing-lists.html
 :  to be removed from this list.
 : 
 :  An Archive of this list is available at:
 :  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 : 
 :
 :
 : Please visit http://www.ipswitch.com/support/mailing-lists.html
 : to be removed from this list.
 :
 : An Archive of this list is available at:
 : http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 :


 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Chuck Schick

Here is the problem.  Imail does not perform smtp authenication on virtual
domains that share an IP address.  (See Link).

http://support.ipswitch.com/kb/IM-2117-DM01.htm

The way I read this, the primary domain has to be running with IMAIL
database.  We do not want to do that since we have an elaborate accounting
system that is integrated with MS SQL.  We set up some virtual domains that
share an IP and we want to be able to have the users of those domains to use
SMTP AUTH but I have been told that IMAIL will not do that with an external
data base.

Chuck Schick
Warp 8, Inc.
www.warp8.com
303-421-5140

- Original Message -
From: [EMAIL PROTECTED] [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 9:46 AM
Subject: Re: [IMail Forum] Switching from an External to the Imail
database!!!


: We're currently using a SQL database for one of our clients in Imail with
: SMTP authentication.  This did not work until we upgraded to the 7.0x
: version of Imail, but since then it seems to be working just fine.
:
: Mike
:
: - Original Message -
: From: Chuck Schick [EMAIL PROTECTED]
: To: [EMAIL PROTECTED]
: Sent: Wednesday, November 14, 2001 11:18 AM
: Subject: [IMail Forum] Switching from an External to the Imail database!!!
:
:
:  We have a couple of domains that presently use a MS SQL database.   It
:  appears that we need to convert these to the Imail database - since
: Imail's
:  SMTP AUTH will not work with external databases for IPless domains.
: 
:  Has anyone done this before and if so what are the steps?  I have
searched
:  the knowledge base and have not come up with anything useful.
: 
:  A small rant - The inability for IMail to perform SMTP authenicate with
:  IPless domains against an external database is a MAJOR FLAW - it sticks
: one
:  with having to burn an IP with every domain or mixing Imail database and
: the
:  external database.
: 
:  Chuck Schick
:  Warp 8, Inc.
:  www.warp8.com
:  303-421-5140
: 
: 
: 
: 
:  Please visit http://www.ipswitch.com/support/mailing-lists.html
:  to be removed from this list.
: 
:  An Archive of this list is available at:
:  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
: 
: 
:
:
: Please visit http://www.ipswitch.com/support/mailing-lists.html
: to be removed from this list.
:
: An Archive of this list is available at:
: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
:


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] CurrentDomain and User Administration

2001-11-14 Thread paul

-- Original Message --
Interesting. You're saying there must be a host alias that matches the
exact hostname in the URL used to access webmail?

Yes, It does appear that way.

 However, problems still exist with me being able to only display
 or modify a user that has a host administrator attribute. If I
 try modifying or diplaying any other user, I am returned to the
 login screen. It appears as if the IMAIL.BeginIfHostAdmin tag is
 holding the value from the user I am editing rather than the
 currently logged in user. 
That's a known bug with 7.04, introduced after Ipswitch beefed-up template
security a bit too aggressively. We've fixed it in our templates, but
stock templates remain broken. You're correct, in that IMail is
interpreting that tag from the perspective of the user being displayed or
modified, not the perspective of the logged-in admin. Whoops. To fix it,
you need to REMOVE those IMail.BeginIfHostAdmin starting and ending tags
from the dispusr.html and chguser.html files.

Yes, thank you, I got that to work last night, but I made a slight change... I kept 
the IMail.BeginIfHostAdmin and changed it to IMAIL.BeginIfUserHostAdmin where it tries 
to determine if you're a system admin or host admin. Then, where it displays the 
checkbox for host admin, I changed that from IMAIL.BeginIfUserHostAdmin to 
IMail.BeginIfHostAdmin. (I just reversed them) Anyway, hopefully that will take care 
of those problems until they release a patch where I'll have to change it back. Don't 
they test before releasing? It's not like it's a hidden bug or anything... pretty 
obvious. Anyway, thanks for your help.

Paul Hassinger

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Todd Holt

The relay options are radio buttons, meaning 1 out of n choices.  You cannot
combine them together.  You must pick one option to use.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matthew
Kiessling
Sent: Wednesday, November 14, 2001 12:05 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


I agree that Relay for Users only is a bad choice but can it also be
used in conjunction w/ relay for addresses?

I have seen SPAM come through my mail server with a spoofed address but
a bad domain name.  If I force mail to have a legitimate IP address and
Domain name I think I could further reduce any SPAM from getting out of
my server.

---Matt


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Rod Dorman
Sent: Wednesday, November 14, 2001 12:11 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Bubba Smith wrote:
  ...
 Last week, a person was able to relay 300,000 emails through our Imail

 server. Our current relay is setup for USERS only.  The person was
 able to relay mail through our system by changing his computer name to

 a domain name in IMail, and creating an email account on his computer
 the same as an email account in one of our Imail domains.  Since IMail

 was setup for RELAY FOR USERS ONLY, everything worked correctly.

A prime example of why 'Relay for local users only' is a bad choice.

  Even if we had setup IMail relay
 for HOSTS ONLY, the same thing would have occurred.  We tried the NO
 RELAY option, but unfortunately, since the accept.txt file does not
 work for NO RELAY, none of our emails from WhatsUP Gold could be sent,

 and some of our third party applications like FrontPage etc... cannot
 use SMTP Authentication.

 It would be nice if the ACCEPT.TXT file would worked for NO RELAY but
 it doesn't.  Accept.txt  only works for HOSTS and USERS only.  If
 accept.txt did work for NO RELAY, we could put the IP addresses of our

 internal systems in this file, and all users would then be required to

 use SMTP Authentication.  Problem Solved.

So use 'Relay mail for Addresses' and enter the subnet or individual
addresses your internal systems are on.

--
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. - Ambassador Kosh


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Todd Holt

Have them use SMTP AUTH from their clients and if they have servers that
need to send SMTP messages, those should have static IPs which you can then
enter into the relay for addresses list.

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Bubba Smith
Sent: Wednesday, November 14, 2001 12:21 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


What about our customers ?
Do I then have to put in each of their IPaddresses from where they will be
coming from ?
Some of them use DHCP from their ISP or cable service.
Thank you for your reply.
B.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Rod Dorman
Sent: Wednesday, November 14, 2001 9:11 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Bubba Smith wrote:
  ...
 Last week, a person was able to relay 300,000 emails through our Imail
 server. Our current relay is setup for USERS only.  The person was able to
 relay mail through our system by changing his computer name to a domain
name
 in IMail, and creating an email account on his computer the same as an
email
 account in one of our Imail domains.  Since IMail was setup for RELAY FOR
 USERS ONLY, everything worked correctly.

A prime example of why 'Relay for local users only' is a bad choice.

  Even if we had setup IMail relay
 for HOSTS ONLY, the same thing would have occurred.  We tried the NO RELAY
 option, but unfortunately, since the accept.txt file does not work for NO
 RELAY, none of our emails from WhatsUP Gold could be sent, and some of our
 third party applications like FrontPage etc... cannot use SMTP
 Authentication.

 It would be nice if the ACCEPT.TXT file would worked for NO RELAY but it
 doesn't.  Accept.txt  only works for HOSTS and USERS only.  If accept.txt
 did work for NO RELAY, we could put the IP addresses of our internal
systems
 in this file, and all users would then be required to use SMTP
 Authentication.  Problem Solved.

So use 'Relay mail for Addresses' and enter the subnet or individual
addresses your internal systems are on.

--
[EMAIL PROTECTED] The avalanche has already started, it is too
Rod Dorman  late for the pebbles to vote. – Ambassador Kosh


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread John Tolmachoff

Although not the best way, I am currently using Relay for local host
only, with Declude Hijack running in back ground. It has solved problems
we have had in the past.

We are unable to use relay for address because some of our clients are
on DSL which uses DHCP. And some of these users are MAC.

Unless someone has a better idea.

John Tolmachoff, Network Engineer

211 E. Imperial Hwy., Suite 106
Fullerton, CA  92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
[EMAIL PROTECTED]
www.reliancesoft.com
 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Wednesday, November 14, 2001 10:04 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.

So you were allowing him to send spam.

The person was able to relay mail through our system by changing his
computer
name to a domain name in IMail, and creating an email account on his
computer
the same as an email account in one of our Imail domains.

No, it's not nearly that difficult.  In their spamware, when asked What

address do you want listed as the sender of the E-mail, they just
entered 
[EMAIL PROTECTED].  No changing of computer names, no creating
E-mail 
accounts, no hacking involved.

Since IMail was setup for RELAY FOR USERS ONLY, everything worked
correctly.

That's correct.  Relay for users means that you will let anyone relay
if 
they have an account on your server, or are willing to use an E-mail 
address on your server.

Even if we had setup IMail relay for HOSTS ONLY, the same thing would
have 
occurred.

Quite true.  Relay for hosts means that anyone can relay mail through 
your server if they have an account on your server, or are willing to
use a 
made-up E-mail address on your server.

  We tried the NO RELAY option, but unfortunately, since the accept.txt

 file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of
our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

With No Mail Relay, you don't use accept.txt -- it means that everyone

has to use SMTP AUTH.

Relay for Addresses does what you are looking for (although you don't
use 
the accept.txt file, you use the button next to Relay for Addresses to

list the safe IP addresses.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but
it
doesn't.

No.  No mail relay really means Only relay for people using SMTP 
AUTH.  If IMail let certain users bypass it, then it would be Relay
for 
Addresses (which it already has).

I'm a little upset about this because it was pretty simple for this
person
to do this ...

The problem is that IMail doesn't make it clear that several of their 
anti-relay options don't prevent spammers from using your mail server.
The 
Relay for Users option isn't designed to stop spammers.

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Todd Holt

It will only if your using IMail registry storage, but not if your using SQL
storage.

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Chuck Schick
Sent: Wednesday, November 14, 2001 2:46 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Switching from an External to the Imail
database!!!


Here is the problem.  Imail does not perform smtp authenication on virtual
domains that share an IP address.  (See Link).

http://support.ipswitch.com/kb/IM-2117-DM01.htm

The way I read this, the primary domain has to be running with IMAIL
database.  We do not want to do that since we have an elaborate accounting
system that is integrated with MS SQL.  We set up some virtual domains that
share an IP and we want to be able to have the users of those domains to use
SMTP AUTH but I have been told that IMAIL will not do that with an external
data base.

Chuck Schick
Warp 8, Inc.
www.warp8.com
303-421-5140

- Original Message -
From: [EMAIL PROTECTED] [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 9:46 AM
Subject: Re: [IMail Forum] Switching from an External to the Imail
database!!!


: We're currently using a SQL database for one of our clients in Imail with
: SMTP authentication.  This did not work until we upgraded to the 7.0x
: version of Imail, but since then it seems to be working just fine.
:
: Mike
:
: - Original Message -
: From: Chuck Schick [EMAIL PROTECTED]
: To: [EMAIL PROTECTED]
: Sent: Wednesday, November 14, 2001 11:18 AM
: Subject: [IMail Forum] Switching from an External to the Imail database!!!
:
:
:  We have a couple of domains that presently use a MS SQL database.   It
:  appears that we need to convert these to the Imail database - since
: Imail's
:  SMTP AUTH will not work with external databases for IPless domains.
: 
:  Has anyone done this before and if so what are the steps?  I have
searched
:  the knowledge base and have not come up with anything useful.
: 
:  A small rant - The inability for IMail to perform SMTP authenicate with
:  IPless domains against an external database is a MAJOR FLAW - it sticks
: one
:  with having to burn an IP with every domain or mixing Imail database and
: the
:  external database.
: 
:  Chuck Schick
:  Warp 8, Inc.
:  www.warp8.com
:  303-421-5140
: 
: 
: 
: 
:  Please visit http://www.ipswitch.com/support/mailing-lists.html
:  to be removed from this list.
: 
:  An Archive of this list is available at:
:  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
: 
: 
:
:
: Please visit http://www.ipswitch.com/support/mailing-lists.html
: to be removed from this list.
:
: An Archive of this list is available at:
: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
:


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] Outlook Calendar Share? Outlook Address Book Export?

2001-11-14 Thread Ekrem Musannif

Hi All
I just got the imail software through my webhost and
it looks really good, but the only problem is that the
boss has over 2000 contacts in outlook and would like
to be able to access them when she is using the
webbased version of imail. Is there a way that we can
do that and not have to enter them manually as this
would take forever! Someone may have seen a batch file
or something like that, which will make my life
simple.
Secondly, is there anyway that we can synchronize the
information in Outlook calendar with the calendar
function of Imail? I hope there is as this again will 
be very useful (and may help me keep this new job
which I just got!) so please help me solve this
problem and if you can't help maybe you know someone
who can, please fwd this to anyone you think that can
help me keep my job!!!
This is urgent so the sooner the better!
Thanks
Ekrem 

__
Do You Yahoo!?
Find the one for you at Yahoo! Personals
http://personals.yahoo.com

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] I think my post was overlooked because someone appeared to answer it

2001-11-14 Thread Kevin Rogers

So here it is again.  

Hi.

We have Imail 6.06 running an external db (SQL Server 2000).  Imail is 
part of an entire web-based application written in ASP that has, among 
other things, a contact database.  We want to allow our users to be able 
to create lists of their business contacts.  Once a List has been 
created, the user should be able to send an email to everyone on that 
list.  We decided we would use Imail's built-in mailing lists for this. 
So we've created the lists where we capture the email addresses of 
everyone and we can write out those addresses to the right file in the 
Imail directory so it creates the mailing list.  BUT, it seems that in 
order to work, there is another file that contains a list of all the 
lists that we have to write to.  This wouldn't be a big deal, except 
that we're worried about contention.  Since we have 400+ users, and 
since each user essenitally can create their own mailing lists, it's 
possible that multiple users would be writing to that one file 
simultaneously.  We're wondering if someone has a work-around for this, 
an API or something that allows multiple users to create lists 
simultaneously.

Thanks for your help.

Kevin


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] max attachment size?

2001-11-14 Thread Serge

I have found a way with webmail

Hi Jim,

Please explain how you do it in webmails 

TIA


-- Original Message --
From: Jim Jones, Jr. [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Tue, 13 Nov 2001 22:42:17 -0600

How can I limit the max size of attachments sent using smtp.  I have found a
way with webmail, but can't seem to find a way to do it otherwise.  Is this
even possible? ... Oh, I'm running 7.04 hotfix2

Thanks,

Jim


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Chuck Schick

Yes:

I fully understand that.  That is a problem for us - means that we will be
mixing our users between external databases and internal databases.  Back to
the original question.  Has anyone ever converted a domain from using an
external database to using the Imail database.

1) Is it as simple as just selecting the radio button (doubtful)?

2) Do I convert the domain to the Imail database and add the users back to
the domain manually?

3) Do I totally blow away the domains and reconfigure (ouch)?

I am guessing that option 2 would suffice but am skeptical.

Thanks for any help.

Chuck Schick
Warp 8, Inc.
www.warp8.com
303-421-5140


- Original Message -
From: Todd Holt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 3:00 PM
Subject: RE: [IMail Forum] Switching from an External to the Imail
database!!!


: It will only if your using IMail registry storage, but not if your using
SQL
: storage.
:
: Todd
:



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] I think my post was overlooked because someone appeared to answer it

2001-11-14 Thread Todd Lahman

Due to self imposed list limitations already present in IMail, you might
consider using a stand-alone list server for the purpose you outlined below.
Listar running on say RedHat 7.2 would easily meet your needs, and the
custom interface and scripts would be easier to create and maintain.  IMail
itself would choke if too many of those users decided to use their lists at
the same time, but Listar with Postfix as the MTA would easily process
anything those users could send it, or at least up to your hardware's
capabilities.  In this case the time spent to develop this solution might be
wasted when you find IMail choking when trying to process the lists.

PostfixGate
A member supported Anti-Spam Database
for Postfix, Sendmail, IMail, and many other *nix MTAs.
www.postfixgate.com

Tel: 509-344-2001
Fax: 509-226-0710


- Original Message -
From: Kevin Rogers [EMAIL PROTECTED]
To: Imail [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 2:40 PM
Subject: [IMail Forum] I think my post was overlooked because someone
appeared to answer it


 So here it is again.

 Hi.

 We have Imail 6.06 running an external db (SQL Server 2000).  Imail is
 part of an entire web-based application written in ASP that has, among
 other things, a contact database.  We want to allow our users to be able
 to create lists of their business contacts.  Once a List has been
 created, the user should be able to send an email to everyone on that
 list.  We decided we would use Imail's built-in mailing lists for this.
 So we've created the lists where we capture the email addresses of
 everyone and we can write out those addresses to the right file in the
 Imail directory so it creates the mailing list.  BUT, it seems that in
 order to work, there is another file that contains a list of all the
 lists that we have to write to.  This wouldn't be a big deal, except
 that we're worried about contention.  Since we have 400+ users, and
 since each user essenitally can create their own mailing lists, it's
 possible that multiple users would be writing to that one file
 simultaneously.  We're wondering if someone has a work-around for this,
 an API or something that allows multiple users to create lists
 simultaneously.

 Thanks for your help.

 Kevin


 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] Switching from an External to the Imail database!!!

2001-11-14 Thread Chuck Schick

Jeff:

I assume that you mean that it will do smtp auth on shared IP domains on an
external database.   My understanding is that this only works if the primary
domain on the server is using the Imail database - if that is not the case
let me know as this would be a major solution for us.  I have paid for the
upgrade to 7 but have been holding off until the major bugs are worked out.

Chuck Schick
Warp 8, Inc.
www.warp8.com
303-421-5140

- Original Message -
From: Jeff Reinhardt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 1:35 PM
Subject: Re: [IMail Forum] Switching from an External to the Imail
database!!!


: Chuck,
:
: We are upgrading from 6.06 to 7.04 because in 7.04 you can use
: SMTP Auth with an external database, not sure if that is even an
: option for you.
:
: Jeff
:
:
: - Original Message -
: From: Chuck Schick [EMAIL PROTECTED]
: To: [EMAIL PROTECTED]
: Sent: Wednesday, November 14, 2001 3:33 PM
: Subject: Re: [IMail Forum] Switching from an External to the Imail
: database!!!
:
:
:  We are running 5.08.
: 
:  Chuck Schick
:  Warp 8, Inc.
:  www.warp8.com
:  303-421-5140
:  - Original Message -
:  From: Jeff Reinhardt [EMAIL PROTECTED]
:  To: [EMAIL PROTECTED]
:  Sent: Wednesday, November 14, 2001 10:33 AM
:  Subject: Re: [IMail Forum] Switching from an External to the Imail
:  database!!!
: 
: 
:  : What version of IMail are you running?
:  :
:  : Jeff
:  :
:  :
:  : - Original Message -
:  : From: Chuck Schick [EMAIL PROTECTED]
:  : To: [EMAIL PROTECTED]
:  : Sent: Wednesday, November 14, 2001 11:18 AM
:  : Subject: [IMail Forum] Switching from an External to the Imail
: database!!!
:  :
:  :
:  :  We have a couple of domains that presently use a MS SQL database.
It
:  :  appears that we need to convert these to the Imail database - since
:  : Imail's
:  :  SMTP AUTH will not work with external databases for IPless domains.
:  : 
:  :  Has anyone done this before and if so what are the steps?  I have
:  searched
:  :  the knowledge base and have not come up with anything useful.
:  : 
:  :  A small rant - The inability for IMail to perform SMTP authenicate
: with
:  :  IPless domains against an external database is a MAJOR FLAW - it
: sticks
:  : one
:  :  with having to burn an IP with every domain or mixing Imail database
: and
:  : the
:  :  external database.
:  : 
:  :  Chuck Schick
:  :  Warp 8, Inc.
:  :  www.warp8.com
:  :  303-421-5140
:  : 
:  : 
:  : 
:  : 
:  :  Please visit http://www.ipswitch.com/support/mailing-lists.html
:  :  to be removed from this list.
:  : 
:  :  An Archive of this list is available at:
:  :  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
:  : 
:  :
:  :
:  : Please visit http://www.ipswitch.com/support/mailing-lists.html
:  : to be removed from this list.
:  :
:  : An Archive of this list is available at:
:  : http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
:  :
: 
: 
:  Please visit http://www.ipswitch.com/support/mailing-lists.html
:  to be removed from this list.
: 
:  An Archive of this list is available at:
:  http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
: 
:
:
: Please visit http://www.ipswitch.com/support/mailing-lists.html
: to be removed from this list.
:
: An Archive of this list is available at:
: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
:


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] SMTP Auth?

2001-11-14 Thread Brad Kingsley



Are people still having SMTP-Auth problems, or have 
they been corrected?

Thanks,

bk




Re: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Len Conrad


There are a couple of these messages that bring up a good point that I'm
unsure of: when you use relay for address, how do you handle clients when
you don't know their IP address?

They do SMTP AUTH, from any ip in the world.

   That is, is there a way to make relay for
address work for clients that may come through any arbitrary ISP and have
any (unknown) IP address?

SMTP AUTH. but many ISP's will block access to port 25.

Len

http://MenAndMice.com/DNS-training
http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4  W2K
http://IMGate.MEIway.com  : Build free, hi-perf, anti-abuse mail gateways


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread IMail Admin at BC Web

There are a couple of these messages that bring up a good point that I'm
unsure of: when you use relay for address, how do you handle clients when
you don't know their IP address?  That is, is there a way to make relay for
address work for clients that may come through any arbitrary ISP and have
any (unknown) IP address?

Ben Bednarz

- Original Message -
From: John Tolmachoff [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 1:42 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Although not the best way, I am currently using Relay for local host
only, with Declude Hijack running in back ground. It has solved problems
we have had in the past.

We are unable to use relay for address because some of our clients are
on DSL which uses DHCP. And some of these users are MAC.

Unless someone has a better idea.

John Tolmachoff, Network Engineer

211 E. Imperial Hwy., Suite 106
Fullerton, CA 92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
[EMAIL PROTECTED]
www.reliancesoft.com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Wednesday, November 14, 2001 10:04 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.

So you were allowing him to send spam.

The person was able to relay mail through our system by changing his
computer
name to a domain name in IMail, and creating an email account on his
computer
the same as an email account in one of our Imail domains.

No, it's not nearly that difficult.  In their spamware, when asked What

address do you want listed as the sender of the E-mail, they just
entered
[EMAIL PROTECTED].  No changing of computer names, no creating
E-mail
accounts, no hacking involved.

Since IMail was setup for RELAY FOR USERS ONLY, everything worked
correctly.

That's correct.  Relay for users means that you will let anyone relay
if
they have an account on your server, or are willing to use an E-mail
address on your server.

Even if we had setup IMail relay for HOSTS ONLY, the same thing would
have
occurred.

Quite true.  Relay for hosts means that anyone can relay mail through
your server if they have an account on your server, or are willing to
use a
made-up E-mail address on your server.

  We tried the NO RELAY option, but unfortunately, since the accept.txt

 file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of
our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

With No Mail Relay, you don't use accept.txt -- it means that everyone

has to use SMTP AUTH.

Relay for Addresses does what you are looking for (although you don't
use
the accept.txt file, you use the button next to Relay for Addresses to

list the safe IP addresses.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but
it
doesn't.

No.  No mail relay really means Only relay for people using SMTP
AUTH.  If IMail let certain users bypass it, then it would be Relay
for
Addresses (which it already has).

I'm a little upset about this because it was pretty simple for this
person
to do this ...

The problem is that IMail doesn't make it clear that several of their
anti-relay options don't prevent spammers from using your mail server.
The
Relay for Users option isn't designed to stop spammers.

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail.  http://www.declude.com


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Re: [IMail Forum] max attachment size?

2001-11-14 Thread Jim Jones, Jr.

It is a function of KillerWebMail... www.hksi.net

Jim

- Original Message -
From: Serge [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 6:09 PM
Subject: Re: [IMail Forum] max attachment size?


 I have found a way with webmail

 Hi Jim,

 Please explain how you do it in webmails

 TIA


 -- Original Message --
 From: Jim Jones, Jr. [EMAIL PROTECTED]
 Reply-To: [EMAIL PROTECTED]
 Date: Tue, 13 Nov 2001 22:42:17 -0600

 How can I limit the max size of attachments sent using smtp.  I have
found a
 way with webmail, but can't seem to find a way to do it otherwise.  Is
this
 even possible? ... Oh, I'm running 7.04 hotfix2
 
 Thanks,
 
 Jim
 
 
 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.
 
 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
 

 Please visit http://www.ipswitch.com/support/mailing-lists.html
 to be removed from this list.

 An Archive of this list is available at:
 http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Todd Holt

There are 2 solutions here that work independently, but in concert.

1. SMTP AUTH works all of the time.  As far as I know, it cannot be turned
off.  It is independent of the relay setting.  It is independent of the IP
address.  And the address can change anytime.  All it needs is a connection
to port 25 of the IMail server.  The client will send credentials to the
server for authentication on each SMTP session opened (basically, each time
a message is sent).

2. The relay setting: If you use No Relay, you can still have clients send
SMTP messages by using SMTP AUTH (remember, it can't be turned off).  Using
Relay for Addresses is essentially a whitelist of IP addresses that can
send SMTP messages throught the server (relay) without requiring
authentication.  Typically, these are machines that run automated processes
that generate email (i.e. not typically your domain controller).  These are
also addresses that typically reside inside the firewall.  This keeps them
from being spoofed.  If you choose, you can specify a public IP address
(like a client's server, or perhaps their firewall public address if they
are using NAT), but it may be possible to spoof this address (b/c you have
no control of what goes on out in the big, bad world).

Summary: By using Relay for Addresses, you allow a unknown number of
clients with unknown IPs to relay after being authenticated and you allow a
known number (keep this list as small as possible) of machines to relay
without authenticating.  Be sure that you trust any machine on the address
list!!!

Hope this helps.

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
BC Web
Sent: Wednesday, November 14, 2001 5:04 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


There are a couple of these messages that bring up a good point that I'm
unsure of: when you use relay for address, how do you handle clients when
you don't know their IP address?  That is, is there a way to make relay for
address work for clients that may come through any arbitrary ISP and have
any (unknown) IP address?

Ben Bednarz

- Original Message -
From: John Tolmachoff [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 1:42 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Although not the best way, I am currently using Relay for local host
only, with Declude Hijack running in back ground. It has solved problems
we have had in the past.

We are unable to use relay for address because some of our clients are
on DSL which uses DHCP. And some of these users are MAC.

Unless someone has a better idea.

John Tolmachoff, Network Engineer

211 E. Imperial Hwy., Suite 106
Fullerton, CA 92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
[EMAIL PROTECTED]
www.reliancesoft.com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Wednesday, November 14, 2001 10:04 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.

So you were allowing him to send spam.

The person was able to relay mail through our system by changing his
computer
name to a domain name in IMail, and creating an email account on his
computer
the same as an email account in one of our Imail domains.

No, it's not nearly that difficult.  In their spamware, when asked What

address do you want listed as the sender of the E-mail, they just
entered
[EMAIL PROTECTED].  No changing of computer names, no creating
E-mail
accounts, no hacking involved.

Since IMail was setup for RELAY FOR USERS ONLY, everything worked
correctly.

That's correct.  Relay for users means that you will let anyone relay
if
they have an account on your server, or are willing to use an E-mail
address on your server.

Even if we had setup IMail relay for HOSTS ONLY, the same thing would
have
occurred.

Quite true.  Relay for hosts means that anyone can relay mail through
your server if they have an account on your server, or are willing to
use a
made-up E-mail address on your server.

  We tried the NO RELAY option, but unfortunately, since the accept.txt

 file does not work for NO
RELAY, none of our emails from WhatsUP Gold could be sent, and some of
our
third party applications like FrontPage etc... cannot use SMTP
Authentication.

With No Mail Relay, you don't use accept.txt -- it means that everyone

has to use SMTP AUTH.

Relay for Addresses does what you are looking for (although you don't
use
the accept.txt file, you use the button next to Relay for Addresses to

list the safe IP addresses.

It would be nice if the ACCEPT.TXT file would worked for NO RELAY but
it
doesn't.

No.  No mail relay really means Only relay for people using SMTP
AUTH.  If IMail let certain users bypass it, then it would be Relay
for
Addresses 

Re: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread IMail Admin at BC Web

Hey Todd,

Very clear explanation.  Now the question becomes: is SMTP AUTH really on
all the time?  In Outlook Express, there's an option, server requires
authentication for ourgoing (SMTP) mail, on the Server tab of the Account
Properties dialog box.  If this is unchecked, doesn't that mean the client
will connect without SMTP AUTH?

Thanks,

Ben


- Original Message -
From: Todd Holt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 6:20 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 There are 2 solutions here that work independently, but in concert.

 1. SMTP AUTH works all of the time.  As far as I know, it cannot be turned
 off.  It is independent of the relay setting.  It is independent of the IP
 address.  And the address can change anytime.  All it needs is a
connection
 to port 25 of the IMail server.  The client will send credentials to the
 server for authentication on each SMTP session opened (basically, each
time
 a message is sent).

 2. The relay setting: If you use No Relay, you can still have clients
send
 SMTP messages by using SMTP AUTH (remember, it can't be turned off).
Using
 Relay for Addresses is essentially a whitelist of IP addresses that can
 send SMTP messages throught the server (relay) without requiring
 authentication.  Typically, these are machines that run automated
processes
 that generate email (i.e. not typically your domain controller).  These
are
 also addresses that typically reside inside the firewall.  This keeps
them
 from being spoofed.  If you choose, you can specify a public IP address
 (like a client's server, or perhaps their firewall public address if they
 are using NAT), but it may be possible to spoof this address (b/c you have
 no control of what goes on out in the big, bad world).

 Summary: By using Relay for Addresses, you allow a unknown number of
 clients with unknown IPs to relay after being authenticated and you allow
a
 known number (keep this list as small as possible) of machines to relay
 without authenticating.  Be sure that you trust any machine on the address
 list!!!

 Hope this helps.

 Todd

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
 BC Web
 Sent: Wednesday, November 14, 2001 5:04 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 There are a couple of these messages that bring up a good point that I'm
 unsure of: when you use relay for address, how do you handle clients
when
 you don't know their IP address?  That is, is there a way to make relay
for
 address work for clients that may come through any arbitrary ISP and have
 any (unknown) IP address?

 Ben Bednarz

 - Original Message -
 From: John Tolmachoff [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, November 14, 2001 1:42 PM
 Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 Although not the best way, I am currently using Relay for local host
 only, with Declude Hijack running in back ground. It has solved problems
 we have had in the past.

 We are unable to use relay for address because some of our clients are
 on DSL which uses DHCP. And some of these users are MAC.

 Unless someone has a better idea.

 John Tolmachoff, Network Engineer

 211 E. Imperial Hwy., Suite 106
 Fullerton, CA 92835
 714-578-7999, ext. 104
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 www.reliancesoft.com



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
 Sent: Wednesday, November 14, 2001 10:04 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 Last week, a person was able to relay 300,000 emails through our Imail
 server. Our current relay is setup for USERS only.

 So you were allowing him to send spam.

 The person was able to relay mail through our system by changing his
 computer
 name to a domain name in IMail, and creating an email account on his
 computer
 the same as an email account in one of our Imail domains.

 No, it's not nearly that difficult.  In their spamware, when asked What

 address do you want listed as the sender of the E-mail, they just
 entered
 [EMAIL PROTECTED].  No changing of computer names, no creating
 E-mail
 accounts, no hacking involved.

 Since IMail was setup for RELAY FOR USERS ONLY, everything worked
 correctly.

 That's correct.  Relay for users means that you will let anyone relay
 if
 they have an account on your server, or are willing to use an E-mail
 address on your server.

 Even if we had setup IMail relay for HOSTS ONLY, the same thing would
 have
 occurred.

 Quite true.  Relay for hosts means that anyone can relay mail through
 your server if they have an account on your server, or are willing to
 use a
 made-up E-mail address on your server.

   We tried the NO RELAY option, but unfortunately, since the accept.txt

  file does not work for NO
 RELAY, none of our 

RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Tianna Thomas

Our servers won't allow send unless that box is checked.

Tianna

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of IMail Admin at
BC Web
Sent: Wednesday, November 14, 2001 10:00 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Hey Todd,

Very clear explanation.  Now the question becomes: is SMTP AUTH really
on
all the time?  In Outlook Express, there's an option, server requires
authentication for ourgoing (SMTP) mail, on the Server tab of the
Account
Properties dialog box.  If this is unchecked, doesn't that mean the
client
will connect without SMTP AUTH?

Thanks,

Ben


- Original Message -
From: Todd Holt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 6:20 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 There are 2 solutions here that work independently, but in concert.

 1. SMTP AUTH works all of the time.  As far as I know, it cannot be
turned
 off.  It is independent of the relay setting.  It is independent of
the IP
 address.  And the address can change anytime.  All it needs is a
connection
 to port 25 of the IMail server.  The client will send credentials to
the
 server for authentication on each SMTP session opened (basically, each
time
 a message is sent).

 2. The relay setting: If you use No Relay, you can still have
clients
send
 SMTP messages by using SMTP AUTH (remember, it can't be turned off).
Using
 Relay for Addresses is essentially a whitelist of IP addresses that
can
 send SMTP messages throught the server (relay) without requiring
 authentication.  Typically, these are machines that run automated
processes
 that generate email (i.e. not typically your domain controller).
These
are
 also addresses that typically reside inside the firewall.  This
keeps
them
 from being spoofed.  If you choose, you can specify a public IP
address
 (like a client's server, or perhaps their firewall public address if
they
 are using NAT), but it may be possible to spoof this address (b/c you
have
 no control of what goes on out in the big, bad world).

 Summary: By using Relay for Addresses, you allow a unknown number of
 clients with unknown IPs to relay after being authenticated and you
allow
a
 known number (keep this list as small as possible) of machines to
relay
 without authenticating.  Be sure that you trust any machine on the
address
 list!!!

 Hope this helps.

 Todd

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin
at
 BC Web
 Sent: Wednesday, November 14, 2001 5:04 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 There are a couple of these messages that bring up a good point that
I'm
 unsure of: when you use relay for address, how do you handle clients
when
 you don't know their IP address?  That is, is there a way to make
relay
for
 address work for clients that may come through any arbitrary ISP and
have
 any (unknown) IP address?

 Ben Bednarz

 - Original Message -
 From: John Tolmachoff [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, November 14, 2001 1:42 PM
 Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 Although not the best way, I am currently using Relay for local host
 only, with Declude Hijack running in back ground. It has solved
problems
 we have had in the past.

 We are unable to use relay for address because some of our clients are
 on DSL which uses DHCP. And some of these users are MAC.

 Unless someone has a better idea.

 John Tolmachoff, Network Engineer

 211 E. Imperial Hwy., Suite 106
 Fullerton, CA 92835
 714-578-7999, ext. 104
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 www.reliancesoft.com



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott
Perry
 Sent: Wednesday, November 14, 2001 10:04 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 Last week, a person was able to relay 300,000 emails through our
Imail
 server. Our current relay is setup for USERS only.

 So you were allowing him to send spam.

 The person was able to relay mail through our system by changing his
 computer
 name to a domain name in IMail, and creating an email account on his
 computer
 the same as an email account in one of our Imail domains.

 No, it's not nearly that difficult.  In their spamware, when asked
What

 address do you want listed as the sender of the E-mail, they just
 entered
 [EMAIL PROTECTED].  No changing of computer names, no creating
 E-mail
 accounts, no hacking involved.

 Since IMail was setup for RELAY FOR USERS ONLY, everything worked
 correctly.

 That's correct.  Relay for users means that you will let anyone
relay
 if
 they have an account on your server, or are willing to use an E-mail
 address on your server.

 Even if we had setup IMail relay for HOSTS ONLY, the same thing would
 have
 occurred.

 Quite 

RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Todd Holt

My previous explanation was purely a server side perspective.

For the client - If the server requires SMTP AUTH (which it should by
now!!!), the client has 2 choices:
(1) Do not supply authentication credentials; in which case the server will
deny all relaying attempts by this client.  Typically reported to the user
as error relaying denied by this server: xxx.xxx.xxx.xxx or something like
that.
(2) Do supply authentication credentials; in which case the server will
authenticate the client and if authentication passes, allow the SMTP relay
(sending of outgoing message).

To accomplish #2 above: You need to setup your client to login (send
credentials) when attempting an SMTP relay (sending a message).  In
Outlook/Express, you need to goto Tools/Accounts, open the DEFAULT account
(this is the one that has (default) next to the mail type, there can be only
one default and this is the account that will be used to send all outgoing
mail), then on the Servers tab check the My Server Requires Authentication
box.  It normally defaults correctly, but you can press the settings button,
then verify that the Use Same Settings As My Incoming Mail Server radio
button is selected.  IMail server cannot use different credentials for
POP3/SMTP on the same user, so as long as you set the POP3 server and SMTP
server to the same IMail machine, you must use the Use Same Settings As My
Incoming Mail Server radio button selection.  Save everything and send a
message!!

Contact me directly off list if you have more questions.

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
BC Web
Sent: Wednesday, November 14, 2001 9:48 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Hey Todd,

Very clear explanation.  Now the question becomes: is SMTP AUTH really on
all the time?  In Outlook Express, there's an option, server requires
authentication for ourgoing (SMTP) mail, on the Server tab of the Account
Properties dialog box.  If this is unchecked, doesn't that mean the client
will connect without SMTP AUTH?

Thanks,

Ben


- Original Message -
From: Todd Holt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 6:20 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 There are 2 solutions here that work independently, but in concert.

 1. SMTP AUTH works all of the time.  As far as I know, it cannot be turned
 off.  It is independent of the relay setting.  It is independent of the IP
 address.  And the address can change anytime.  All it needs is a
connection
 to port 25 of the IMail server.  The client will send credentials to the
 server for authentication on each SMTP session opened (basically, each
time
 a message is sent).

 2. The relay setting: If you use No Relay, you can still have clients
send
 SMTP messages by using SMTP AUTH (remember, it can't be turned off).
Using
 Relay for Addresses is essentially a whitelist of IP addresses that can
 send SMTP messages throught the server (relay) without requiring
 authentication.  Typically, these are machines that run automated
processes
 that generate email (i.e. not typically your domain controller).  These
are
 also addresses that typically reside inside the firewall.  This keeps
them
 from being spoofed.  If you choose, you can specify a public IP address
 (like a client's server, or perhaps their firewall public address if they
 are using NAT), but it may be possible to spoof this address (b/c you have
 no control of what goes on out in the big, bad world).

 Summary: By using Relay for Addresses, you allow a unknown number of
 clients with unknown IPs to relay after being authenticated and you allow
a
 known number (keep this list as small as possible) of machines to relay
 without authenticating.  Be sure that you trust any machine on the address
 list!!!

 Hope this helps.

 Todd

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
 BC Web
 Sent: Wednesday, November 14, 2001 5:04 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 There are a couple of these messages that bring up a good point that I'm
 unsure of: when you use relay for address, how do you handle clients
when
 you don't know their IP address?  That is, is there a way to make relay
for
 address work for clients that may come through any arbitrary ISP and have
 any (unknown) IP address?

 Ben Bednarz

 - Original Message -
 From: John Tolmachoff [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, November 14, 2001 1:42 PM
 Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 Although not the best way, I am currently using Relay for local host
 only, with Declude Hijack running in back ground. It has solved problems
 we have had in the past.

 We are unable to use relay for address because some of our clients are
 on DSL which uses DHCP. And some 

Re: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread IMail Admin at BC Web

Todd,

One correction to your statements: if you use IMAP instead of POP3, then
Outlook Express CAN send via different accounts.  In that case, I think you
need to set the authentication checkbox to on for each account (which can't
hurt in any event).

Thanks again,

Ben

- Original Message -
From: Todd Holt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 8:15 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 My previous explanation was purely a server side perspective.

 For the client - If the server requires SMTP AUTH (which it should by
 now!!!), the client has 2 choices:
 (1) Do not supply authentication credentials; in which case the server
will
 deny all relaying attempts by this client.  Typically reported to the user
 as error relaying denied by this server: xxx.xxx.xxx.xxx or something
like
 that.
 (2) Do supply authentication credentials; in which case the server will
 authenticate the client and if authentication passes, allow the SMTP relay
 (sending of outgoing message).

 To accomplish #2 above: You need to setup your client to login (send
 credentials) when attempting an SMTP relay (sending a message).  In
 Outlook/Express, you need to goto Tools/Accounts, open the DEFAULT account
 (this is the one that has (default) next to the mail type, there can be
only
 one default and this is the account that will be used to send all outgoing
 mail), then on the Servers tab check the My Server Requires
Authentication
 box.  It normally defaults correctly, but you can press the settings
button,
 then verify that the Use Same Settings As My Incoming Mail Server radio
 button is selected.  IMail server cannot use different credentials for
 POP3/SMTP on the same user, so as long as you set the POP3 server and SMTP
 server to the same IMail machine, you must use the Use Same Settings As
My
 Incoming Mail Server radio button selection.  Save everything and send a
 message!!

 Contact me directly off list if you have more questions.

 Todd

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
 BC Web
 Sent: Wednesday, November 14, 2001 9:48 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 Hey Todd,

 Very clear explanation.  Now the question becomes: is SMTP AUTH really on
 all the time?  In Outlook Express, there's an option, server requires
 authentication for ourgoing (SMTP) mail, on the Server tab of the Account
 Properties dialog box.  If this is unchecked, doesn't that mean the client
 will connect without SMTP AUTH?

 Thanks,

 Ben


 - Original Message -
 From: Todd Holt [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, November 14, 2001 6:20 PM
 Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


  There are 2 solutions here that work independently, but in concert.
 
  1. SMTP AUTH works all of the time.  As far as I know, it cannot be
turned
  off.  It is independent of the relay setting.  It is independent of the
IP
  address.  And the address can change anytime.  All it needs is a
 connection
  to port 25 of the IMail server.  The client will send credentials to the
  server for authentication on each SMTP session opened (basically, each
 time
  a message is sent).
 
  2. The relay setting: If you use No Relay, you can still have clients
 send
  SMTP messages by using SMTP AUTH (remember, it can't be turned off).
 Using
  Relay for Addresses is essentially a whitelist of IP addresses that
can
  send SMTP messages throught the server (relay) without requiring
  authentication.  Typically, these are machines that run automated
 processes
  that generate email (i.e. not typically your domain controller).  These
 are
  also addresses that typically reside inside the firewall.  This keeps
 them
  from being spoofed.  If you choose, you can specify a public IP address
  (like a client's server, or perhaps their firewall public address if
they
  are using NAT), but it may be possible to spoof this address (b/c you
have
  no control of what goes on out in the big, bad world).
 
  Summary: By using Relay for Addresses, you allow a unknown number of
  clients with unknown IPs to relay after being authenticated and you
allow
 a
  known number (keep this list as small as possible) of machines to relay
  without authenticating.  Be sure that you trust any machine on the
address
  list!!!
 
  Hope this helps.
 
  Todd
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
  BC Web
  Sent: Wednesday, November 14, 2001 5:04 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [IMail Forum] SMTP Relay. What can we do better.
 
 
  There are a couple of these messages that bring up a good point that I'm
  unsure of: when you use relay for address, how do you handle clients
 when
  you don't know their IP address?  That is, is there a way to make relay
 for
  address work for clients that 

RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Todd Holt

I've never used IMAP, but I'll take your word for it on that. :-)

Does that mean that you would have to select the SMTP server to use for each
outbound message?  Sounds like a pain to me.:-(  I prefer the POP3 method of
selecting the outbound account and knowing that all messages will go there
without doing anything other than pressing send.  Maybe I should setup IMAP,
just to play with it!!

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
BC Web
Sent: Wednesday, November 14, 2001 10:54 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Todd,

One correction to your statements: if you use IMAP instead of POP3, then
Outlook Express CAN send via different accounts.  In that case, I think you
need to set the authentication checkbox to on for each account (which can't
hurt in any event).

Thanks again,

Ben

- Original Message -
From: Todd Holt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 8:15 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


 My previous explanation was purely a server side perspective.

 For the client - If the server requires SMTP AUTH (which it should by
 now!!!), the client has 2 choices:
 (1) Do not supply authentication credentials; in which case the server
will
 deny all relaying attempts by this client.  Typically reported to the user
 as error relaying denied by this server: xxx.xxx.xxx.xxx or something
like
 that.
 (2) Do supply authentication credentials; in which case the server will
 authenticate the client and if authentication passes, allow the SMTP relay
 (sending of outgoing message).

 To accomplish #2 above: You need to setup your client to login (send
 credentials) when attempting an SMTP relay (sending a message).  In
 Outlook/Express, you need to goto Tools/Accounts, open the DEFAULT account
 (this is the one that has (default) next to the mail type, there can be
only
 one default and this is the account that will be used to send all outgoing
 mail), then on the Servers tab check the My Server Requires
Authentication
 box.  It normally defaults correctly, but you can press the settings
button,
 then verify that the Use Same Settings As My Incoming Mail Server radio
 button is selected.  IMail server cannot use different credentials for
 POP3/SMTP on the same user, so as long as you set the POP3 server and SMTP
 server to the same IMail machine, you must use the Use Same Settings As
My
 Incoming Mail Server radio button selection.  Save everything and send a
 message!!

 Contact me directly off list if you have more questions.

 Todd

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
 BC Web
 Sent: Wednesday, November 14, 2001 9:48 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


 Hey Todd,

 Very clear explanation.  Now the question becomes: is SMTP AUTH really on
 all the time?  In Outlook Express, there's an option, server requires
 authentication for ourgoing (SMTP) mail, on the Server tab of the Account
 Properties dialog box.  If this is unchecked, doesn't that mean the client
 will connect without SMTP AUTH?

 Thanks,

 Ben


 - Original Message -
 From: Todd Holt [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Wednesday, November 14, 2001 6:20 PM
 Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


  There are 2 solutions here that work independently, but in concert.
 
  1. SMTP AUTH works all of the time.  As far as I know, it cannot be
turned
  off.  It is independent of the relay setting.  It is independent of the
IP
  address.  And the address can change anytime.  All it needs is a
 connection
  to port 25 of the IMail server.  The client will send credentials to the
  server for authentication on each SMTP session opened (basically, each
 time
  a message is sent).
 
  2. The relay setting: If you use No Relay, you can still have clients
 send
  SMTP messages by using SMTP AUTH (remember, it can't be turned off).
 Using
  Relay for Addresses is essentially a whitelist of IP addresses that
can
  send SMTP messages throught the server (relay) without requiring
  authentication.  Typically, these are machines that run automated
 processes
  that generate email (i.e. not typically your domain controller).  These
 are
  also addresses that typically reside inside the firewall.  This keeps
 them
  from being spoofed.  If you choose, you can specify a public IP address
  (like a client's server, or perhaps their firewall public address if
they
  are using NAT), but it may be possible to spoof this address (b/c you
have
  no control of what goes on out in the big, bad world).
 
  Summary: By using Relay for Addresses, you allow a unknown number of
  clients with unknown IPs to relay after being authenticated and you
allow
 a
  known number (keep this list as small as possible) of machines to 

RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Michael Welch

Today our host informed us that he is instituting the no relay you all have been 
mentioning. He also said that was for security reasons to avoid any chance of spoofing 
and therefore connecting via the IP addresses in a list would be the ONLY way that we 
could collect our mail.

He said that would mean that when I go on the road, I will no longer be able to 
collect my mail via my Mindspring dialup number, which I keep for traveling purposes. 
He said we MUST use Imail's web mail when not at our regular computer and at our 
regular host.

But if I am reading this correctly (it is difficult for me to understand), he is 
wrong. He should turn off all relaying and then our email programs will do SMTP AUTH 
which means that someone would have to have my email password to send mail via our 
domain. That would mean that I should still be able to collect my mail via Eudora 
while logged into other ISPs, including Mindspring while I am on the road. That is, as 
long as my mail client has the Authentication Allowed box checked.

Am I correct? I am no nerd, so please be gentle.

Todd Holt wrote at 08:20 PM 11/14/2001 -0600:
  
There are 2 solutions here that work independently, but in concert.

1. SMTP AUTH works all of the time.  As far as I know, it cannot be turned
off.  It is independent of the relay setting.  It is independent of the IP
address.  And the address can change anytime.  All it needs is a connection
to port 25 of the IMail server.  The client will send credentials to the
server for authentication on each SMTP session opened (basically, each time
a message is sent).

2. The relay setting: If you use No Relay, you can still have clients send
SMTP messages by using SMTP AUTH (remember, it can't be turned off).  Using
Relay for Addresses is essentially a whitelist of IP addresses that can
send SMTP messages throught the server (relay) without requiring
authentication.  Typically, these are machines that run automated processes
that generate email (i.e. not typically your domain controller).  These are
also addresses that typically reside inside the firewall.  This keeps them
from being spoofed.  If you choose, you can specify a public IP address
(like a client's server, or perhaps their firewall public address if they
are using NAT), but it may be possible to spoof this address (b/c you have
no control of what goes on out in the big, bad world).

Summary: By using Relay for Addresses, you allow a unknown number of
clients with unknown IPs to relay after being authenticated and you allow a
known number (keep this list as small as possible) of machines to relay
without authenticating.  Be sure that you trust any machine on the address
list!!!

Hope this helps.

Todd

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of IMail Admin at
BC Web
Sent: Wednesday, November 14, 2001 5:04 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


There are a couple of these messages that bring up a good point that I'm
unsure of: when you use relay for address, how do you handle clients when
you don't know their IP address?  That is, is there a way to make relay for
address work for clients that may come through any arbitrary ISP and have
any (unknown) IP address?

Ben Bednarz

- Original Message -
From: John Tolmachoff [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, November 14, 2001 1:42 PM
Subject: RE: [IMail Forum] SMTP Relay. What can we do better.


Although not the best way, I am currently using Relay for local host
only, with Declude Hijack running in back ground. It has solved problems
we have had in the past.

We are unable to use relay for address because some of our clients are
on DSL which uses DHCP. And some of these users are MAC.

Unless someone has a better idea.

John Tolmachoff, Network Engineer

211 E. Imperial Hwy., Suite 106
Fullerton, CA 92835
714-578-7999, ext. 104
[EMAIL PROTECTED]
[EMAIL PROTECTED]
www.reliancesoft.com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Wednesday, November 14, 2001 10:04 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] SMTP Relay. What can we do better.


Last week, a person was able to relay 300,000 emails through our Imail
server. Our current relay is setup for USERS only.

So you were allowing him to send spam.

The person was able to relay mail through our system by changing his
computer
name to a domain name in IMail, and creating an email account on his
computer
the same as an email account in one of our Imail domains.

No, it's not nearly that difficult.  In their spamware, when asked What

address do you want listed as the sender of the E-mail, they just
entered
[EMAIL PROTECTED].  No changing of computer names, no creating
E-mail
accounts, no hacking involved.

Since IMail was setup for RELAY FOR USERS ONLY, everything worked
correctly.

That's correct.  Relay for users means that you will let 

Re: [IMail Forum] I think my post was overlooked because someone appeared to answer it

2001-11-14 Thread Sanford Whiteman

I  have  built  a similar architecture and have three things to say in
response:

1) The...

file that contains a list of all the lists that we have to write to

...is  not  necessary  to send mail to lists. You don't need to update
LISTS.TXT  unless  a)  you're interested in presenting your list names
via IMAILSRV's LIST command or b) you absolutely, positively, must use
this  file  (and--hint--not  a  multi-user  database)  to  present  an
accurate  list  of  lists  via  the native Imail web admin interface
(not--another hint!--via a page gen'd by your proprietary app).

2)  You  *do*,  however,  need  to  be able to add your lists' program
aliases  to the Imail Registry, though I presume you already have this
functionality  via  VBScript  or  are  using the command-line ADDLIST.
Luckily, the Reg is sufficiently multi-user.

3)  Be  attentive to concurrency issues when writing out the USERS.LST
file. Yes, it *seems* like only one user will be writing to each file,
but  what  if  that same user is logged in twice...control for this in
your  code or it may be a problem. Time out the file open to make sure
it gets closed if a session times out. Also, open it as shareable read
write  when  updating  it, so it can also be opened simultaneously for
reading by the IMAILSRV process if necessary.

Contrary  to  what  Todd  suggested, I see no reason not to do this on
Imail.  You haven't told us how many users you expect per list, but if
each  one  is  just  one  person's legitimate opt-in contact list, I
can't  see  it being a problem, given sufficient server hardware. He's
certainly right that with big public lists, Imail's not up to the task
performance-wise.  Of  course,  that's  why we (Broadleaf Systems) are
writing  a  substitute  (see  my  other post)! But until then (he said
humbly) the native server will probably do you fine.

Regards,

Sandy


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



[IMail Forum] Best ODBC.DLL version to use?

2001-11-14 Thread Peter Salvage

Hi all

I'm using 5.9 and wondered what would be the best version of the dll to use. I
noticed on the Ipswitch FTP site that there are a number of dll's to choose from
but am somewhat hesitant to arbitrarily select one.

Cheers,
/wiZZ


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/



RE: [IMail Forum] SMTP Relay. What can we do better.

2001-11-14 Thread Len Conrad


He said that would mean that when I go on the road, I will no longer be 
able to collect my mail

he´s wrong, since reading POP mailbox is totally different from you sending 
mail via SMTP AUTH.

  via my Mindspring dialup number, which I keep for traveling purposes. He 
 said we MUST use Imail's web mail when not at our regular computer and at 
 our regular host.

...for sending mail.  Or relay outgoing through your dial-up provider.

But if I am reading this correctly (it is difficult for me to understand), 
he is wrong. He should turn off all relaying and then our email programs 
will do SMTP AUTH which means that someone would have to have my email 
password to send mail via our domain.. That would mean that I should still 
be able to collect my mail via Eudora while logged into other ISPs,

yep

Len



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/