
30 Chapter 1 Mail Service Setup
Restricting SMTP Relay
Your mail service can restrict SMTP relay by allowing only approved hosts to relay mail.
You create the list of approved servers. Approved hosts can relay through your mail
service without authenticating. Servers not on the list cannot relay mail through your
mail service unless they authenticate first. All hosts, approved or not, can deliver mail to
your local mail users without authenticating.
Your mail service can log connection attempts made by hosts not on your approved
list.
To restrict SMTP relay:
1 In Server Admin, select Mail in the Computers & Services pane.
2 Click Settings.
3 Select the Filters tab.
4 Check “Accept SMTP relays only from these”
5 Edit the list of hosts.
a Click the Add button to add a host to the list.
b Click the Remove button to delete the currently selected host from the list.
c Click the Edit button to change the currently selected host from the list.
d Enter a single IP address, or the network/netmask pattern such as 192.168.40.0/21
SMTP Authentication and Restricted SMTP Relay Combinations
The following table describes the results of using SMTP authentication and restricted
SMTP relay in various combinations.
SMTP requires
authentication
Restricted
SMTP relay
Result
On Off All mail servers must authenticate before your mail service will
accept any mail for relay. Your local mail users must also
authenticate to send mail.
On On Approved mail servers can relay without authentication. Servers
that you have not approved can relay after authenticating with
your mail service.
Off On Your mail service can’t be used for open relay. Approved mail
servers can relay (without authenticating). Servers that you have
not approved can’t relay unless they authenticate, but they can
deliver to your local mail users. Your local mail users don’t have to
authenticate to send mail.
This is the most common configuration.
LL2349.Book Page 30 Friday, August 22, 2003 2:47 PM
Komentáře k této Příručce