Thursday, May 30, 2002 you wrote: ES> Actually there isn't a lot to address with this. It is a configuration issue ES> in all the cases I have seen. If you have a backup (gateway) server between ES> your IMail server and the world most will set the internal IMail server up ES> to relay and/or treat the gateway as local by adding it to the Relay for ES> Addresses and Hosts file. This is not necessary and is why it is getting ES> through.
http://www.ipswitch.com/support/IMail/guide/imailug7.1/Chapter%203%20config11.html "You must also make an entry in your hosts file (\winnt\system32\drivers\etc\hosts) which associates his IP address with his domain name. This way, IMail Server will attempt to deliver any mail it receives for that domain to his computer (bypassing the MX records in DNS, which point to itself and can create a mail loop). If you are using IMail's SMTP security to prevent spammers from using your computer as a spam relay, add his server's IP address in the "[addresses]" dialog box in the Mail Relay Options on the SMTP Security tab." Following these directions to set up a backup mail server it is possible to relay to an address with a percent sign which should not be authenticated. The first entry I see in my archives for this is a report by Mike Lewinski [[EMAIL PROTECTED]] on Tue 9/18/2001. I know I verified his findings, reported same to IMAIL, and I believe others did as well. However, it seems you are saying that the backup server should not be listed in the addresses acl of the first server. I suppose that might be possible as a corrective measure in certain situations but surely not all. The fact is that if anyone has this configuration now it is possible to relay mail without authentication. Or at least it seems to be the case to me. Terry Fritts Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
