This forum is closed to new posts and
responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:
Subject: Can authenticated SMTP bypass Reverse DNS check?
Feedback Type: Problem
Product Area: Domino Server
Technical Area: Security
Platform: Windows 2003 server
Release: 8.0.2
Reproducible: Always
Server configuration settings allow authenticated users to bypass anti-relay checks, but apparently not Reverse DNS check, which seems kind of silly. Isn't the whole point of SMTP authentication to identify the sender so you don't need all the other checks?
01/06/2012 11:53:39 AM SMTP Server [10E4:037A-2354] Connection from [111.111.111.111] rejected for policy reasons. IP address of connecting host not found in reverse DNS lookup.
01/06/2012 11:53:40 AM SMTP Server: Authentication succeeded for user UserName/Domain ; connecting host 111.111.111.111
01/06/2012 11:53:45 AM SMTP Server [10E4:037A-1BCC] Connection from [111.111.111.111] rejected for policy reasons. IP address of connecting host not found in reverse DNS lookup.
01/06/2012 11:53:45 AM SMTP Server: Authentication succeeded for user UserName/Domain ; connecting host 111.111.111.111
01/06/2012 11:53:50 AM SMTP Server [10E4:037A-4814] Connection from [111.111.111.111] rejected for policy reasons. IP address of connecting host not found in reverse DNS lookup.
01/06/2012 11:53:50 AM SMTP Server: Authentication succeeded for user UserName/Domain ; connecting host 111.111.111.111
01/06/2012 11:53:55 AM SMTP Server [10E4:037A-35E4] Connection from [111.111.111.111] rejected for policy reasons. IP address of connecting host not found in reverse DNS lookup.
01/06/2012 11:53:55 AM SMTP Server: Authentication succeeded for user UserName/Domain ; connecting host 111.111.111.111
01/06/2012 11:54:39 AM SMTP Server [10E4:037A-2F84] Connection from [111.111.111.111] rejected for policy reasons. IP address of connecting host not found in reverse DNS lookup.
Feedback number WEBB8Q9QVY created by ~Hank Ekboosipulnivu on 01/06/2012