Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

how can I stop the Open-Relay functionality on a server Notes 4.6?

Status
Not open for further replies.

Sky14657

IS-IT--Management
Dec 19, 2002
124
DE
Unfortunately I don't have more than basic knowledge of the domino server administration. But our email-host is in the ORDB-blacklist, therefor I have to stop the open relay service. But how?

----------------------------------------

Everybody has the right to be stupid -- but some people abuse the privilege. (a quote from Stalin - and I am one of the abusers, sometimes...)
 
You can block the relay in your NAB (Name and Address Book). Open your NAB (names.nsf) on your server and edit yoru server document.

From the NAB, click on Server, Configurations, and double-click your server in the list. Click on Edit configuration.

Open the Router/SMTP Tab, Restrictions and Controls, SMTP inbound controls.

Enter an asterick (*) in the following fields:
- "Deny messages from external internet domains to be sent to the following internet domains"
- "Deny messages from the following external internet hosts to be sent to external internet domains"
Save and close.

From the Notes console, type:
tell smtp q <enter> - allow for the smtp task to quit
lo smtp <enter>

Once this change has been made, you can test the open relay by opening a telnet session with your box.

telnet to the IP on port 25
ex: telnet 10.109.4.10 25
Type the following commands in sequence:
helo domain.com
mail from:joe@domain.com <enter>
rcpt to:wilma@relay.com <enter>
data <enter>
This is a test. <enter>
. <enter>

This will try and relay a message to an external domain using your Domino box as an SMTP relay. You should be prompted with an error message. If it's says &quot;OK&quot; then it was sent and something is still wrong.

Make sure your domain is listed in the Global Domain document. If not, inbound mail will fail as well.

Hope this was helpful.


Rgds,

John Judge
MCSE, MCSA, MCP, CCNA, CNA, Network +, A+
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top