Groups | Blog | Home
all groups > iis smtp nntp > august 2004 >

iis smtp nntp : SMTP Questions


anonymous NO[at]SPAM discussions.microsoft.com
8/5/2004 9:10:41 PM
1. I want to make sure that my configuration prevents
open relay.
I have the POP3 server set up to use Encrypted file
passwords.
Access: "Anonymous access" and "Integrated auth." options
are selected.
Relay: "Only in the list" (and I have nothing in the
list) and "Allow authenticated users to relay" are
selected. There seems to be a great deal of confusion on
this topic, and I think it stems from Anonymous access
being taken as a type of authentication method, when in
reality it is not.

So I guess my question is, if I have it set to use
Integrated Windows authentication, how is it
authenticating users trying to send mail, when I don't
have any accounts on the computer for these users... that
is, they are just set up using encrypted file access.

2. I want to use Authenticated POP access as the Windows
Help file specifies to use when doing Encrypted file
access, but I don't see any option to use this anywhere.

3. The web server's Alert e-mails will not send. I get
messages in the Badmail directory that the message can't
be sent. In the box to set the SMTP server to send from,
I have tried 127.0.0.1, the external IP address, the
computer name by itself, the computer's FQDN name... and
none work.

Justin
8/6/2004 1:19:25 PM
Yes, POP3 uses SPA. However, SPA is not an option to
select when using Encrypted File.

My question was, what credentials are being used by the
SMTP server during the authentication process to allow
relaying? I have nothing in the Allowed list, and Allow
authenticated users to relay is selected, and I can send
mail out, so what credentials are being authenticated?

Kristofer Gafvert
8/6/2004 3:21:00 PM
Hello,

[quoted text, click to view]

SMTP does not work with Encrypted File, only the POP3 server does. SMTP uses
windows accounts.

Answer 2: Enable SPA on the server
Answer 3: You are probably not allowed to send. You can add the webserver's
IP to the list of allowed computers to relay, or send logon credentials.

Anonymous Access is an access option. Relay and access is NOT the same
thing. Relay is when you send an email, access is to be able to communicate
with the SMTP Server. Other SMTP servers must be able to communicate with
your server, to send emails to your server, and therefore Anonymous Access
is required. Other SMTP servers will however NOT relay using your server,
and that is the difference.


--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


[quoted text, click to view]

Justin
8/6/2004 4:06:05 PM
I am also getting the Unable to relay for <> error, where
<> is the address of the mailbox I am trying to send to,
which is located on an external server. Mail from one
Kristofer Gafvert
8/7/2004 10:11:36 AM
And as i said in my previos email:

"You are probably not allowed to send. You can add the webserver's
IP to the list of allowed computers to relay, or send logon credentials"

You can send to internal accounts, because that is not relaying.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


[quoted text, click to view]

Justin
8/7/2004 1:39:19 PM
What should my Outbound options on the Delivery tab look
like? I.e., security, and there is another dialog box I
believe.

Kristofer Gafvert
8/8/2004 8:39:04 AM
This is not relevant to your problem. This is what it is written in the Help
file about this tab:

"Once a connection has been opened and the receiving server has acknowledged
that it is ready to receive data, messages can be transmitted for delivery"

You are having problems to relay, as said in the error message. You are not
even getting to delivery part, since the email does not even get it to your
server.

But for the Security, it should be Anonymous, unless you need something
else.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


[quoted text, click to view]

Justin
8/8/2004 2:53:41 PM
Ok, I see what Outbound Security is for now. I thought it
was tellng my server what it needed its users to do to
send outgoing mail, but its really for the server its
connecting to, in order to send mail to it.

So if I want users to authenticate to the SMTP server in
order to relay (send an outgoing email to another SMTP
server) then I need to use Windows accounts or Active
Directory accounts, is this correct? In other words,
encrypted file has nothing to do with SMTP as you said,
only POP3, meaning that it does not provide
username/password authentication in order to relay. This
would mean that the Server 2003 Web Edition can't do what
I need, since it doesn't let me set up Active Directory
Kristofer Gafvert
8/9/2004 6:33:12 AM
Hello,

[quoted text, click to view]

Yes, that is correct!

[quoted text, click to view]

You have the option to set up local Windows Accounts.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


[quoted text, click to view]

anonymous NO[at]SPAM discussions.microsoft.com
8/9/2004 9:36:48 AM
Right, but the only reason local windows accounts won't
work for me is because I need to use the same mailbox
name across multiple domains.

I think I got it now. Thanks Kristofer, you've been so
AddThis Social Bookmark Button