> I should create a temp account that does not have any space to > receive any emails (so I don't have to maintain and keep it clean) > in the primary domain.
Yes, create *one for every hosted domain* with the name of the domain as its username. N.B., this does mean that if a vengeful employee leaves one of your customers, they will have the credentials to send spam unless the customer asks you to change the shared password. This is a much more acceptable risk than what you've currently got going on, of course! > Then I should have all users use this account > as a security account email out, so I will be using the SMTP > authorization. Yes. > Then, I should check the relay for addresses only, and specify the > web servers' addresses so the server will relay mail for them. Yes. > At this moment, as long as the spammer does not know the password > for the SMTP auth (and the account), s/he will not be able to spam > through us. You've got it! Sandy Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
