Re: What are the recommendations for CHGSMTPA?

Scott,

Judging by our testing you are 100% right.

Now, do we have an employee generating spam?

Rob Berendt
-- 
"They that can give up essential liberty to obtain a little temporary 
safety deserve neither liberty nor safety." 
Benjamin Franklin 




"Scott Johnson" <sjohnson@highsmith.com>
Sent by: domino400-bounces@midrange.com
02/03/2003 11:21 AM
Please respond to Lotus Domino on the iSeries / AS400
 
        To:     Lotus Domino on the iSeries / AS400 
<domino400@midrange.com>
        cc: 
        Fax to: 
        Subject:        Re: What are the recommendations for CHGSMTPA?



Rob,

Doesn't your Domino server have a different IP address than the iSeries
box?  If so, then only expose the Domino IP & SMTP Port to the "world" 
thru
the firewall. The SMTP server (port) on the iSeries itself should be 
safely
hidden behind the firewall.

-- Scott Johnson



What are the recommendations for:

Change SMTP Attributes (CHGSMTPA)

on an iSeries that is:
- sending email out with SNDDST and the QTmmSendMail api
- sending/receiving email with Domino
- sending/receiving messages via SNADS SNDNETMSG
- shouldn't be receiving any smtp email except via Domino

We want to make sure that when Domino is down and not controlling the smtp
port we do not become an open relay.
(It's amazing how much stuff is in there that we're going to have to wait
for Domino R6 for.)

Our current settings are:

Autostart server . . . . . . . .   *YES
Retries by minute:
  Number of retries  . . . . . .   3
  Time interval  . . . . . . . .   30
Retries by day:
  Number of retries  . . . . . .   0
  Time interval  . . . . . . . .   0
Retries by hour:
  Number of retries  . . . . . .   0
  Time interval  . . . . . . . .   0
Retry remote name server . . . .   *NO
Automatic registration . . . . .   *NO
  User ID prefix . . . . . . . .   QSM
  Address  . . . . . . . . . . .   QSMRMTAD
  System name  . . . . . . . . .   TCPIP
  Alias table type . . . . . . .   *SYSTEM
User ID delimiter  . . . . . . .   '?'
Mail router  . . . . . . . . . .   *NONE
Coded character set identifier     00819
Mapping tables:
  Outgoing EBCDIC/ASCII table  .   *CCSID
    Library  . . . . . . . . . .
  Incoming ASCII/EBCDIC table  .   *CCSID
    Library  . . . . . . . . . .
Firewall . . . . . . . . . . . .   *NO
Journal  . . . . . . . . . . . .   *NO
Process all mail through MSF . .   *NO
Percent routing character  . . .   *YES
Dial-up scheduler:
  Start with SMTP server . . . .   *NO
  Configuration profile  . . . .
  Connection time interval . . .
Support ETRN for server  . . . .   *NO
Support ETRN for client:
  Enable client ETRN . . . . . .   *NO
  Incoming mail server address
  Mail domain name . . . . . . .
Support 8-bit MIME . . . . . . .   *NO
Delivery status notification:
  Responsible person . . . . . .   *NONE
Subsystem description  . . . . .   QSYSWRK
  Library  . . . . . . . . . . .     QSYS
Realtime Blackhole List  . . . .   *NONE
Allow relayed mail . . . . . . .   *ALL
Interface/domain association . .   *NONE
Filter mail for virus  . . . . .   *NONE

Rob Berendt
--
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
Benjamin Franklin
_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (DOMINO400) mailing list
To post a message email: DOMINO400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: DOMINO400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.





_______________________________________________
This is the Lotus Domino on the iSeries / AS400 (DOMINO400) mailing list
To post a message email: DOMINO400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: DOMINO400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.