Groups | Blog | Home
all groups > iis security > january 2007 >

iis security : SMTP Relay Problem


Help Needed
1/27/2007 8:37:01 AM
Hi,

I am getting error while using SMTP Relay, the error is

550 5.7.1 Unable to relay for prasadagv@gmail.com.

We have Windows 2003 OS used to host our web site (a small business site
developed in asp.net). We are using 'SMTP Virtual Server' and 'POP3 Service'
components of Windows 2003 OS for our mails (mail accounts like
'abc@ourdomain.com')

When we configured 'SMTP Virtual Server' Relay as 'All except the list
below' (there are no IPs in list) in Relay Restrictions (SMTP
Properties/Access/Relay); we could able to send and receive mails from our
Outlook client to gmail/yahoo..... (from 'abc@ourdomain.com' mail id). But
there are thousands of spam mails filled in queue folder.

But when we select 'Only the list below' and 'Allow all computers
successfully authenticate...' options in 'Relay Restrictions' (SMTP
Properties/Access/Relay); We are able receive mails from gmail/yahoo to our
Outlook client but we couldn't able to send mails thru Outlook to
gmail/yahoo..... Mail will bounce back with Message '50 5.7.1 Unable to
relay for prasadagv@gmail.com'. When perform 'Test Account settings' in
outlook it is successfull.

I want to stop spam mails in our queue folder and want to use outlook as
client to send/receive mails from anywhere (ofcourse after authentication
only) which option I need to select. Please help me in this regard. Please
Dave
1/27/2007 5:03:33 PM
i recommend turning off authentication and then setting the relay settings
to 'only the list below', and then adding your lan ip address range to it,
like 192.168.0.1(255.255.255.0). this will stop any relaying through you
from outside while allowing anyone on the lan to send mail out.

[quoted text, click to view]

Help Needed
1/27/2007 8:21:01 PM
Thanks Dave,

Basic question... how to know my LAN IP address. Without calling my ISP is
any other way to know the LAN IP address.

Thanks


[quoted text, click to view]
Dave
1/28/2007 11:26:19 AM
i am assuming you have a router that serves your internet connection to the
computers on your lan, if so you should be able to go to any machine, open a
cmd prompt and do ipconfig/all and see what the address is and netmask, from
which you can determine the range of addresses on your lan. you could also
check the router setup, or your dhcp server for the same info.

[quoted text, click to view]

Help Needed
1/28/2007 10:00:00 PM
Hi Dave,

Thanks for your answer. I have a single machine and connected to internet
through a cable. When I use ipconfig I am getting only one ip and tried this
one (added to 'Only the list below' list of SMTP Relay Restrictions), but no
use. Do I need to specify my ISP's lan IP range.

Thanks.


[quoted text, click to view]
Ken Schaefer
1/29/2007 10:16:11 PM
No - you do not specify your ISP's LAN range - that would allow all the
ISP's customers to relay through your server.

Only add your local, internal, LAN's IP addresses. If you only have a single
machine, then add the IP address of that machine. If you have your own
personal, internal, network, you can add the IP addresses of your internal
machines (or the network/subnet mask of your internal machines)

Cheers
Ken

[quoted text, click to view]
AddThis Social Bookmark Button