Relaying questions |
Post Reply 
|
| Author | |
Tou 
Guest Group 
|
 Post Options
 Thanks(0)
 Quote Reply
 Topic: Relaying questionsPosted: 14 September 2004 at 7:33pm |
|
I'm a new user/tester. Just downloaded this today and got it installed and running. My question is... I want to disable relaying from all hosts by default except for those I explicitly defined as friendly hosts. In another words, I don't want anybody (outside or local) to use my server to send mail to anybody, except those that I defined as being able to (such as local IP ranges, certain external IPs, etc...) The only thing I could find was "Local Domains", which as I understands, allows me to control who I can send to. I don't understand the logic behind this, as I would like to be able to send to all domains, but only allow certain IP and IP ranges to relay (send outgoing messages) through my server... Any explanation or help would be appreciated. If I can get this to work or work similarly to what I explain, we will buy this program. |
|
 |
|
|
LogSat
Admin Group 
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 14 September 2004 at 11:56pm |
|
Tou,
By default SpamFilter ISP will not allow anyone to use it to openly relay emails. That would be a very bad thing for an antispam product :-) SpamFilter will only allow emails to be delivered (relayed) to the domains listed in the "Local Domains". Those would be the domains you own and control. Any attempt to use SpamFilter to relay an email not addressed to those domains will be denied. Only localhost (127.0.0.1) is allowed to relay email, nobody on the internet or your internal IPs will be able to use it to send email to anyone except to the domains listed in that whitelist. Some administrators also want to use SpamFilter to scan their outgoing email. Since again by default SpamFilter will not allow email to be sent to other domains, the only way this can be accomplished is by adding the IP addresses that are allowed to relay to an IP whitelist. Only then will those IP be able to send email to the outside world, to domains not listed in the Local Domains list. I hope this helps. Roberto F. LogSat Software |
|
|
|
|
Tou
Guest Group
|
Post Options
Thanks(0)
Quote Reply
Posted: 15 September 2004 at 1:09pm |
|
Robert, thanks for the reply. That last paragraph there, that's exactly what I'm looking for. Where do I put these IPs that I want to "white list", so they can relay to the outside world? Do I put them in the "Excluded Domains / IPs" tab ? If so, I will try it. Thanks for your help.
|
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 15 September 2004 at 6:05pm |
|
Yes, the "Excluded Domains / IPs" tab is the one you're looking for.
Please note that while you can add sender's domain names in there that
will bypass incoming filtering rules, they will still not be able to
relay to the outside. This is done because if a spammer is able to
"guess" what domains you have in that list, they can easily fake a
sender's email address from that domain and thus use SpamFilter to
relay.
However if you add an IP or a range of IPs in there (the list can have both domains and IPs), then in that case if the sender's IP is going to be able to relay to the outside. It's extremely hard for a spammer in this case to spoof his IP, so that willnot be a concern. Roberto F. LogSat Software |
|
|
|
|
Lee
Groupie 
Joined: 04 February 2005 Location: United States Status: Offline Points: 50 |
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 7:42am |
|
Roberto along those same lines... I added my real internal mail server to the list of whitelist ip's. I then set my mail server to use SF as it's gateway for outbound mail. The problem is that SF trys to forward that mail back to the mail server resulting in a loop. Shouldn't SP be sending any mail not listed in the local domains outbound not to the destination server listed? Am I missing some thing? Thanks, Lee |
|
|
|
|
LogSat
Admin Group
Joined: 25 January 2005 Location: United States Status: Offline Points: 4104 |
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 11:05pm |
|
Lee,SpamFilter will only forward email to your destination SMTP server, it will not send email out to the internet. That is how SpamFilter was designed. Having your SMTP server use SF as a gateway will indeed cause mail loops. Some administrators have SpamFilter as the "outgoing smtp server" in their client's email applications, but in that case SpamFilter will still forward the emails to the main SMTP server, which will then relay them to the internet.Roberto F.
LogSat Software
|
|
|
|
Topic Options|
Post Reply
|
|
Tweet
|
| Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |
This page was generated in 0.156 seconds.