Re: SMTP open relays

[lk-m-wizards () bigears solsoft com (Lorens Kockum)]

On firewall-wizards c.horsington () aas com au wrote:
> I has been reported in the orbs database as an open mail relay.

It would be interesting to know what effect this had on your mail :-)

> I have checked both the Lotus cc:Mail support pages and any links available
> from the orbs web pages but have found no references on how to prevent the
> SMTP link from being an open relay.

Yell at Lotus support.  There are CERT advisories out there that
explicitely say that being an open relay is bad, bad, BAD.

If you can't upgrade cc:Mail (probable) and you can't ditch
cc:Mail (my recommendation), you'll have to put a front-end.

If you can use a Unix machine, any sendmail, qmail, postfix,
or smail or exim will do; sendmail is much more difficult to
configure for someone with no sendmail experience, while qmail
is a breeze, but will generate seperate copies of all mail sent
to multiple recipients, which can be extremely annoying in
certain (not very common) cases.

If you cannot, there are NT programs whose primary function is
to serve as mail filters (virus scanning and suchlike) and which
will let you stop relaying.  They do not need a seperate server
AFAIK.  Names like Mailguard, Mailwatch, MIME-sweeper spring to
mind, but I have no experience with them and do not specifically
know that one of these will be what you need.

> Any help would be muchly appreciated (by the end of the year
> they will be behind a fire wall but...)

Depends on what kind of firewall you mean. Many firewalls will
not help curtail relaying.