> I have a question for everyone running SA on a gateway. Are all of you > checking against a user list, or are you forwarding > everything to internal > and letting the internal reject on unknown users?
I export a list from Exchange 5.5 every three hours, Exchange sucks in that it accepts the message then NDRs it, it doesn't do any validation during the smtp session. > Also, do you scan outgoing, or simply let it pass? Let it pass, we're a business, it'd suck mightily if a customer got an email from us marked as spam by our own system :-0