I think you want to look at changing this.  If I am correct (wasn't clear from the settings you described), I could fake my from address as one of your users and bounce E-mail off of your server.  This is a common test for an open relay.

What you want is "Relay Mail for Addresses" in the real IMail interface.  Then press the addresses button and add the IP's of your E-mail sending scripts, and range for your local network(s).  Anyone that is outside of either one of these areas can use SMTP AUTH to send E-mail ("My server requires authentication "checkbox in Outlook Express, not checked by default; automatic in Netscape).

Matt



Jason W. Allen wrote:
See now you've confused me... Which isn't very hard.

I believe I have Relay for Local Users Only (If I look in the Imail admin
interface, that what it says, but it says relay by addresses in the web
admin).  Yet If I test relaying (by telneting in and trying to send
something with a local user address), I still get a relaying error and it
won't let it.   To me that means I'm am not a Open relay.  But I still need
a local usermailbox to send from my App mailers.

--Jason W. Allen

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sanford Whiteman
Sent: Wednesday, September 10, 2003 2:13 PM
To: Jason W. Allen
Subject: Re[2]: [Declude.JunkMail] mailbox forwarding no action


  
If  I try to send from an alias I get relaying errors, since I can't
use  other  settings,  other then a mailfrom. So that's why I need a
valid Email Address.
    

Please  don't  tell us that you're using 'Relay for Local Users'--i.e.
that  you're  running  an  open  relay  (unless  this  is only exposed
internally).

While some apps can't handle AUTH, is there some reason that you can't
relay by IP? Are these server IPs really changing all that much?

-Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
------------------------------------
  

Reply via email to