Re: fix.your.open.relay.or.die.net

["R. Bruce Hoffman, Jr." <rbruceh@xxxxxxxxxxxxx>]

----- Original Message -----
From: "Fritz Hayes" <fhayes@spiritone.com>
To: <midrange-l@midrange.com>
Sent: Tuesday, November 20, 2001 6:13 PM
Subject: RE: fix.your.open.relay.or.die.net


> POP3 or IMAP.  How would you propose setting up the SMTP server on the
> AS/400 or Domino to service these users without the user/password
> technique?

It's not really something that _should_ be done on the 400 or any other smtp
server (sendmail, etc.).

It's something your firewall should do at a minimum.

Two ways: NO access from outside networks, just filter off port 25
the other - allow access only from specific static IP addresses. ATT and
some of the other big players do this, which is why you have to dial in to
their systems and use their assigned addresses in order to access their smtp
servers.

The idea is that you should not allow access to _any_ smtp server from
unrestricted/uncontrolled hosts.

===========================================================
R. Bruce Hoffman, Jr.
 -- IBM Certified Specialist - AS/400 Administrator
 -- IBM Certified Specialist - RPG IV Developer

"I want to be different, just like everybody else!"
  - Ceili Rain