Re: Email direct from IBM without relay (was: New lower cost IBMi announced)

On Thu, Feb 16, 2017 at 4:19 PM, Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>
wrote:

Many email servers are only accepting traffic over secure transports. Old
i5/OS cannot handle the newer encryption methods. I am not sure if the IBM
SMTP Client / Server will handle secure transports at all. ( I see you can
configure SSL/TLS on 7.2 when you use authentication.) Don't know how far
back that goes. We here block outbound port 25 from everything except our
Exchange server, and then it can only send through to our DMZ were we have
a mail gateway. This mail gateway act as an inbound filter as well as
provides outbound encryption and Data Loss Prevention. You cannot email
out SSN #, Credit Card, or Check MICR numbers. As well as a few other
rules. For that reason we use the mail relay to send everything through
our mail proxy.

But if you set up your iSeries to send mail and have a valid MX record for
it in public DNS with reverse DNS, you can send to most email servers out
there.

True, but normally this is not done this way unless the IBM i is the actual
mail router. In most cases it's used like any other email client (like a
PC using outlook) when sending mail.

So it is really up to the end admin as to how they want to secure their
outbound email.

If there is an admin that knows how to set that up.

Most IBM i shops used Lotus or Domino as the mail server (or an in house
exchange server) but are again moving away from that it seems now as well
and using cloud offerings like Office 365.

Most of the time when shops set up email to delivery directly to the
recipient it's because they got lucky and it works internally and they
don't care how, when, or why.
.