iMS SMTP relay

Hi all,

Hope this isn't a stupid question.

I'm currently migrating our relaying setup on sendmail to iMS 5.x. To set up relaying for some domains and block others is simple enough in sendmail but I'm struggling with the manuals for iMS. All I want to do is to grant internal users and another friendly network the ability to use the sendmail port for their SMTP - which seems easy enough using the INTERNAL_IP mapping table. But what I'd like to do is obviously not allow connections from the Internet to use us for relaying and only accept email for us and our friendly network.

Anybody got any exmaples/suggestions ?

Kind regards - Steve

[685 byte] By [709028] at [2007-11-25 7:09:44]
# 1

No question is stupid. :)

The IP addresses in the INTERNAL_IP mapping are considered trusted machines by iMS. By trusted I mean allowed to relay messages through the mail. Does not matter if the mail is going to local iMS system users or say user@aol.com, the message will be accepted and then delivered.

If the connection is not coming from one of the IP addresses/network block listed in the INTERNAL_IP block then the client can only send mail to local users, i.e. those users that are part of your overall iMS system.

Hope that helps,

Chad

708686 at 2007-6-29 17:41:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

Hi,

A slightly different question to add on here.

I am able to use SMTP AUTH for relay for my internal users. That is if my internal users have to send a mail to any global domain, then they need to do authentication.

Now, if my users come from the external network and they need to use my server to relay their mails using SMTP AUTH, they are refused by "Relay Denied" message.

How can I allow this?

My mappings file have the following settings:

PORT_ACCESS

*|*|*|*|* $C$|INTERNAL_IP;$3|$Y$E

* $YEXTERNAL

INTERNAL_IP

$(172.16.15.41/32) $Y

127.0.0.1 $Y

* $N

where the internal IP given is my mailhost.

I also have the tcp_auth channel in imta.cnf

How can I allow external users to use my server as a relay after proper authentication

Regards,

Sanvir Jham

706683 at 2007-6-29 17:41:31 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...