Smtp security

To the Ipswitch web site

Ipswitch Forums
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



Smtp securityExpand / Collapse
Author
Message
Posted 7/29/2004 6:51:59 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 10/28/2004 12:14:00 PM
Posts: 2, Visits: 1

Hi,

We filter all our email though an outside anti-spam company. This service then delivers our email as per normal to our server. However what is also happening is that some annoying companies are delivering striaght to our email server bypassing the anti-spam.

In addition to that we allow users outside to connect to email via imap accounts and send using smtp on our server.

Is there any way of stopping inbound smtp connections to our mail server except from our anti-spam company and allow our users to send email from outside.

We are using Imail 8.05

many thanks in advance

Paul

Post #457
Posted 7/29/2004 8:49:45 AM
Forum Administrator

Forum AdministratorForum AdministratorForum AdministratorForum AdministratorForum AdministratorForum AdministratorForum AdministratorForum Administrator

Group: Administrators
Last Login: 11/19/2008 8:59:01 AM
Posts: 757, Visits: 507

You could set your control access to deny all except the IP addresses of service you use and your users.

Tripp



Tripp Allen
President, Messaging Products
Ipswitch, Inc.
Post #459
Posted 8/5/2004 11:56:18 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 10/28/2004 12:14:00 PM
Posts: 2, Visits: 1
that of course won't work for users on non-fixed ip addresses outside of course.
...
Post #605
Posted 8/6/2004 1:52:35 AM
Time Traveler

Time TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime TravelerTime Traveler

Group: Forum Members
Last Login: 6/15/2005 1:07:00 AM
Posts: 217, Visits: 1

You are asking for, perhaps, more than you realize.  You want wildcard addresses to be able to connect, and yet...you want to block wildcard addresses!

Your choices are three:

1) Run your server on a port other than 25, if your mail scanning provider can forward to a non-well-known port, and set up your MUA clients to hit that different port.

2) Restrict direct connection to your server to the scanning provider's fixed IP addresses only, and require a VPN for anyone else.

3) Restrict direct connection to your server to the scanning provider's fixed IP addresses only, and implement a second server that is used as a submission-only server (preferably on port 587, the WKP for this service) for anyone else.  This submission server will require authentication for all attempts, since all domains will be remote to it.

--Sandy



------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.

Defuse Dictionary Attacks: Turn Remote Mailboxes into Aliases on your IMail MX!
  http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/

Post #616
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: Dave, Mark Singh, kevin r gillis, Jason Benton, Brandon Felger, Ben Henderson, Tripp Allen, Jason Henline, Will Sansbury, Jason Williams, Hush, FTPplanet.com, Hugh Garber, WUP-PM, Tom Lewis, mmulryan@ipswitch.com, mswimm, Brad Senter

PermissionsExpand / Collapse

All times are GMT -5:00, Time now is 6:19am

Powered By InstantForum.NET v4.1.4 © 2008
Execution: 0.063. 9 queries. Compression Enabled.