SMTP Authentication

I would like to ask about how to setup SMTP Authentication in Domino 5.0.12 & 6.5.1.

My purpose is not allowing any outsider to relay my server, but allowing our users use the SMTP server over the Internet with authentication.

I have changed the server document.

Name & Password : Yes

Anonymous : No

User can be authenticated before sending. But server cannot receive any Internet incoming mail afterwards.

I think many people come across this problem.

I have searched the forum, but still cannot find any solution. Only some references, unluckily they do not meet my requirements.

Can anyone be kind enough to drop down all settings here explicitly?

Or can Domino do it? Both R5 and R6 face the same problem.

Thanks a lot !

Jerry

Subject: SMTP Authentication

u cant recieve any internet mail is because of ur smtp incoming control in the domino config document not set properly.check it and read the help carefully.

Subject: RE: SMTP Authentication

Which setting should I check in the config doc?

If I change the server document to:

Name & Password : No

Anonymous : Yes

Everything works fine, but no user authentication before sending SMTP mail. As a result the outsiders can relay the server.

Note: Outsider’s IP is dynamic. I cannot use config doc to restrict them as I want my users to use SMTP from the Internet as well.

Please help in more details.

Thanks.

Subject: RE: SMTP Authentication

You use the anti-relay fields in the configuration doc to control relaying. R6 also allows you to exclude authenticated users from anti-relay checking, so that they can send mail from POP/IMAP clients.

Subject: SMTP Authentication

you can achieve this in Release 6 using "pop before smtp"1. you enable "SMTP authentication " in server document.

  1. In configuration document-- SMTP inbound –

“Allow Authenticated users to Relay”

Check this settings… i havent used this but pretty sure this may help you.

Pankaj S. Tripathi

Subject: RE: SMTP Authentication

Thanks Pankaj,

I will try the config doc setting as you said.

But why the server cannot receive any mail after server doc is changed?

Everytime I change it to:

Name & Password : Yes

Anonymous : No

it cannot receive mail.

From my point of view, even I setup the config doc, it still cannot receive mail properly.

Does any other setting I miss?

Jerry

Subject: RE: SMTP Authentication

How about Domino R5?

R5 does not has the “Allow Authenticated User to Relay” in config doc. Can it do the same function? How?

Regards

Subject: RE: SMTP Authentication

I have struggled to find an answer for this on R5.“allow authenticated users to relay” should work for you.

let me know if you get it working.

Pankaj S. Tripathi

Subject: RE: SMTP Authentication

  1. If R5 you are in the wrong forum. Post in the 4.6/5 forum.

  2. With 6, set allow authenticated users to relay to enabled and ensure that passwords are set which are not trivially guessable otherwise you may find your system being abused.

http://chris-linfoot.net/plinks/CWLT-5ZDRMB

http://chris-linfoot.net/BlogByCategory?OpenView&RestrictToCategory=SMTP%20AUTH

  1. You need to set the SMTP server to

Name & Password : Yes

Anonymous : Yes

Ordinary senders will not attempt to authenticate - they should not have to and they have no credentials to authenticate with. Non-authenticated users will be subject to relay restrictions - that is they may send email to you, but not through you.

Authenticated senders (your own mobile users using a mail client that authenticates with SMTP) will have full relay ability and can send email both to your own local domain and to external domains.

I think this is exactly what you want.

Subject: Sure? Doesn’t work for me…

Do I understand you correctly?

You just set at the SMTP Inbound Controls the value “Exceptions for authenticated users” to “Allow all authenticated users to relay” and in the server document

Name & password: Yes

Anonymous: Yes

at Ports/Internet Ports/Mail/SMTP Inbound?

So did I… after restarting the server I tried a telnet on port 25:


ehlo microsoft.com

250-mydomain.com Hello microsoft.com ([...]), pleased to meet you

250-HELP

250-AUTH LOGIN

250-SIZE 51200000

250 PIPELINING

mail from:bill.gates@microsoft.com

250 bill.gates@microsoft.com… Sender OK

rcpt to:myownaddress@anotherserver.com

250 myownaddress@anotherserver.com… Recipient OK

data

354 Enter message, end with “.” on a line by itself

bla

.

250 Message accepted for delivery

quit

221 mydomain.com SMTP Service closing transmission channel


The mail arrived without problems at myownaddress@anotherserver.com

So I’d call that an open relay… what did I do wrong?