Open Relay Domino

Notes/Domino 8 Forum

Subject: Open Relay Domino

Feedback Type: Problem

Product Area: Domino Server

Technical Area: Administration

Platform: iSeries

Release: 8.0.1

Reproducible: -Reproducibility-

Hi all

I have configured my domino server to block the open relay.

In Configuration Document, Router/SMTP, Restrictions and Controls, SMTP Inbound Controls:
"Deny messages to be sent to the following external internet domains: is set to "*".( * means all)"

"Deny messages from the following internet hosts to be sent to external internet domains" is set to "*" (means all)

In the Allow Messages only from the following internet host to be sent... is set with the ip address needed like BES, SMTP server iSeries, etc.

In the Inbound Relay Enforcement section, Perform Anti-Relay enforcement for these connecting hosts is set to "External hosts"

In "Exceptions for authenticated users" is set "Allow all authenticated users to relay"

But when I'm trying to test the open relay, with telnet or www.mailradar.com the result is: Relays accepted by remote host.

Now, We are in a blacklist.

I have checked the options in the internet ports-Inbound SMTP-Anonymous is set "Yes" but in some documentation mentions that we should setup a separate server that authenticates SMTP inbound connections. And we are using Blackberrys.

I'm confuse because we have one server with agdata (antivirus) configured between domino server and internet. This server receives the mails from internet and delivers to Domino. Domino Server must send the outgoing mails to internet through that server, but in this moment Domino Server has configured send the mails directly to internet

Maybe this is causing the open relay.

Can somebody help me to find why is not working

220 gdata AVKSMTP Server
helo test1
250 gdata Hello test1
mail from:chava@pato.com
250 chava@pato.com ... Sender Okay
rcpt to:chavaa@patito.com
250 chavaa@patito.com ... Recipient Okay

Feedback number WEBB84H2DZ created by ~Sarah Cisgeroberg on 04/14/2010