RE: Demon Email - A firewall is NOT the answer

["Roger" <roger@xxxxxxx>]

Reading the (not too extensive) helpfile suggests that Mercury can be set
to
relay mail addressed to local addresses from incoming SMTP connections -
so
this would probably do the trick.

Also Mercury can filter based on rules, and forward the filtered mails,
so
this would be another way.

Mercury has run on my W2K Server for two months non-stop without
problem,
which is not bad for a free prog. Have found it to be a good solution
to
reading mail via Outlook from several computers by copying incoming mail
to
multiple mailboxes, and also (by filtering one mailbox)solves the problem
of
mail from this group clogging up my web mail.

Roger Shingler


> Roger, 
> 
> Don't know about the "non-expensive" products :-)
> 
> Personally, I wouldn't worry about POP3 at all.
> 
> Just have SMTP go to "relay box". Relaybox will relay 
> yourdomain.com onto the Exchange server and NOT ACCEPT any 
> mail not for the Exchange server.
> 
> Exchange server will send out mail directly...
> 
> I assume that Mercury can do this?
> 
> Mark
> 
> -----Original Message-----
> From: Roger [mailto:roger@xxxxxxx]
> Sent: 13 June 2002 18:07
> To: ukha_d@xxxxxxx
> Subject: RE: [ukha_d] Demon Email - A firewall is NOT the answer
> 
> 
> What about putting Mercury Mail in between Exchange and 
> Demon? Can be set to take mail as a client, and re-serve it 
> locally. AFAIK Mercury can be relay proofed, and Exchange 
> would still be talking to a SMTP or POP3 server.
> 
> Roger Shingler
> 
> >
> > Rob,
> > 
> > A firewall won't help, unless it also does mail relaying for
you.
> > 
> > Port 25 needs to be open to receive email full stop. The 
> > relaying issue is that port 25 should only accept email 
> > either TO or FROM one of your domains. (ie - should only 
> > accept email to one of your users or from one of your users -
> > the thing that Demon'
> > s trying to block is your email server accepting email from 
> > one third-party, and passing it on to another third-party.)
> > 
> > Commercial firewalls (like firewall 1) will accept plugins 
> > that handle mail relaying for you, but the "turnkey Linux
> > ones" won't, AFAIK.
> > 
> > You need some mail relay. Linux SENDMAIL is probably the best
> > solution.
> > 
> > Regards,
> > 
> > Mark
> > 
> > -----Original Message-----
> > From: Rob Mouser [mailto:rmouser@xxxxxxx]
> > Sent: 13 June 2002 13:43
> > To: Ukha (E-mail)
> > Subject: [ukha_d] Demon Email
> > 
> > 
> > Hi 
> > 
> > This is a little 'wide' but I feel it is relevant to us HA 
> people. We
> > have a Demon Web account here and was infact on the verge of 
> > setting one
> > up for home (Fixed IP etc, ISDN, fixed cost etc.....However 
> don't post
> > on this as its not the subject!) HOWEVER we have just had 
> > external email
> > banned by Demons Abuse Team due to our MS Exchange Server 
> > v5.0 (Part of
> > SBS Ver4.0)beeing venerable to email spammers using relay. 
> I've spoken
> > to Demon and done some research and it appears that Exchange
Ver5.0
> > cannot be protected against relay attacks! Only Ver5.5 has 
> > sufficient t
> > functionality to block relay use.
> > 
> > OK so we cannot upgrade to 5.5 (Various issues with 
> compatibility with
> > some bespoke software supplied by another company.) (Or in 
> effect SBS
> > v4.5) at this precise moment and so the only option is to add
> > a firewall
> > to the network (25 users) anyone got any recommendations 
> that will do
> > the trick? As long as Demon can telnet in and get refused 
> > they will open
> > us back up.
> > 
> > Yours bemused and confused.........
> > 
> > Many Thanks
> > Rob
> > Rob Mouser
> > rmouser@xxxxxxx
> > rob@xxxxxxx
> > 
> > 
> > 
> > For more information: http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx 
> > Subscribe:  ukha_d-subscribe@xxxxxxx 
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
> > List owner:  ukha_d-owner@xxxxxxx 
> > 
> > Your use of Yahoo! Groups is subject to 
> > http://docs.yahoo.com/info/terms/
> > 
> > 
> > 
> >
______________________________________________________________
> > __________
> > This email has been scanned for all viruses by the 
> MessageLabs SkyScan
> > service. For more information on a proactive anti-virus 
> > service working
> > around the clock, around the globe, visit http://www.messagelabs.com
> >
______________________________________________________________
> > __________
> > 
> > ------------------------ Yahoo! Groups Sponsor 
> > ---------------------~-->
> > Will You Find True Love?
> > Will You Meet the One?
> > Free Love Reading by phone!
> > http://us.click.yahoo.com/Deo18C/zDLEAA/Ey.GAA/IBOolB/TM
> >
--------------------------------------------------------------
> > -------~->
> > 
> > For more information: http://www.automatedhome.co.uk
> > Post message: ukha_d@xxxxxxx 
> > Subscribe:  ukha_d-subscribe@xxxxxxx 
> > Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
> > List owner:  ukha_d-owner@xxxxxxx 
> > 
> > Your use of Yahoo! Groups is subject to 
> > http://docs.yahoo.com/info/terms/
> > 
> > 
> 
> ------------------------ Yahoo! Groups Sponsor 
> ---------------------~-->
> Will You Find True Love?
> Will You Meet the One?
> Free Love Reading by phone!
> http://us.click.yahoo.com/Deo18C/zDLEAA/Ey.GAA/IBOolB/TM
> --------------------------------------------------------------
> -------~->
> 
> For more information: http://www.automatedhome.co.uk
> Post message: ukha_d@xxxxxxx 
> Subscribe:  ukha_d-subscribe@xxxxxxx 
> Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
> List owner:  ukha_d-owner@xxxxxxx 
> 
> Your use of Yahoo! Groups is subject to 
http://docs.yahoo.com/info/terms/

For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx
Subscribe:  ukha_d-subscribe@xxxxxxx
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.

<<attachment: winmail.dat>>