IBM AH0QXML - Lotus Domino Messaging, User Manual

Page: 73 / 120

Chapter 4. Domino 6 Server anti-spam features
61
By default the inbound relay controls are enabled for external hosts. If the
connecting host’s IP address resolves to a name in one of the local Internet
domains, the host is considered internal. IP addresses that resolve to host
names outside the local Internet domains or that do not have DNS entries are
considered external. You can change this so that all or no hosts are subject to
the inbound relay controls.
򐂰
“Exceptions for authenticated users:”
Specifies whether users who supply login credentials when connecting to the
server are exempt from enforcement of the inbound relay controls. Choose
one:
– Perform anti-relay checks for authenticated users - The server does not
allow exceptions for authenticated users. Authenticated users are subject
to the same enforcement as non-authenticated users.
– Allow all authenticated users to relay - Users who log in with a valid name
and password are exempt from the applicable inbound relay controls. Use
this to enable relaying by POP3 or IMAP users who connect to the network
from ISP accounts outside the local Internet domain.
This field provides an exception mechanism so that POP3 and IMAP users
will be able to send internet e-mail through this server.
򐂰 “Exclude these connecting hosts from anti-relay checks:”
You create an exceptions list containing the IP addresses or host names of
hosts that relay to any permitted domain. For each specified exception, the
inbound relay controls will not be enforced. Enter the IP addresses or host
names of hosts to be exempted from the restrictions specified in the Inbound
relay controls section.
– Enter IP addresses or host names of specific servers that should be able
to relay messages through this server.
– IP addresses are entered in brackets. Wildcards can be used to indicate
all addresses in one subnet. Also ranges of addresses can be specified.
[156.16.25.1]
[156.16.25.*]
[156.16.25.128-255]
apps1.lotus.com
Note: You can use wildcards to represent an entire subnet address, but not
to represent values in a range. For example, [127.*.0.1] is valid;
[123.123.12-*.123] is not. If you want to specify a range, you can do it by
entering, for example [127.0.0.128-255].
– Set the previous field to “All connecting hosts” and enter IP addresses or
host names of internal servers that are allowed to relay in order to prevent
unauthorized use of your SMTP servers by internal departments.