IIS SMTP Relay authentication -- iis smtp nntp

jeff.nospam NO[at]SPAM zina.com
6/23/2004 8:00:15 PM

On Wed, 23 Jun 2004 20:08:11 +0100, "Jorge Aguiar" <jaguiar@labmed.pt>
[quoted text, click to view]

Okay. Use separate virtual SMTP servers. Set relay restrictions
tighter for the internal client SMTP and allow authenticated users to
relay for the external server. Point internal clients at the internal
SMTP and external clients at the external SMTP.

While I'd work on the *must* part of the blank passwords, you could
also switch to VPN's for the mobile users and assign them an IP range
you can control.

Jeff

[quoted text, click to view]

Jorge Aguiar
6/23/2004 8:08:11 PM

I'm afraid I've lost you there. Exactly how would I use separate virtual
servers for that purpose ?
I'm using Windows Server 2003 Standard.
My SMTP server is directly connected to the Internet. I have mobile users
that use serveral ISP's on their notebooks to send and receive e-mail.
They're not computer savvy people, so it's quite difficult to have them
change their SMTP server address in Outlook each time they switch ISPs.
So I set up my server to allow relay from authenticated users.
The problem is: some of the user accounts used in the local network *must*
have blank or easy-to-guess passwords (shame !!). So, all a potential
spammer has to do is to guess a valid username.
I'd like to be able to only allow SMTP relay from users that really needed
(the mobile ones). Strong passwords are enforced for those users.

Any hints ?

Thanks a lot !
Jorge

[quoted text, click to view]

Ralf Ziller
6/27/2004 11:18:17 AM

"Jorge Aguiar" <jaguiar@labmed.pt> schrieb im Newsbeitrag
news:%2342Gy1SWEHA.3120@TK2MSFTNGP12.phx.gbl...
[quoted text, click to view]

You could use a Protocol Event sink which drops the session if one of a list
of unsecure users authenticates.

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages about iis smtp nntp

iis smtp nntp : IIS SMTP Relay authentication