
jocelyn.sloan at fargodiocese
Oct 27, 2009, 2:26 PM
Post #2 of 2
(615 views)
Permalink
|
Thank you this is very helpful. -----Original Message----- From: Alan Doherty [mailto:alan [at] alandoherty] Sent: Tuesday, October 27, 2009 2:16 PM To: spf-help [at] v2 Subject: RE: [spf-help] using ISP's smtp servers At 17:42 27/10/2009 Tuesday, Steve Yates wrote: >Sloan, Jocelyn wrote on Tue, Oct 27 2009 at 12:01 pm: > >> Thank you for the help everyone; I appreciate your insights and >> suggestions. I am not quite sure how to setup esmtp on my Exch2003 >> server. If anyone knows a website with instructions, I'd be quite >> grateful. > >http://support.microsoft.com/kb/823019 yup that pretty much covers it, i would strongly recommend using moving to tls {encription} also {if not doing already}, and either self-signed or cacert/free cert {BTW exchange only talks esmtp {extended smtp} on any port, {the extensions allow authentication to be possible}} what your wanting to setup is an esmtp-submission server on the correct port, as opposed to combining esmtp-incomming and esmtp-submission functions on port 25 {like you were doing} so what you are wanting to do is just add another [e]smtp connector that is bound to port 587 instead of port 25 then copy all the existing user authentication and relay settings form your port25 connector to your port587 connector {as your port25 one is working for your users at the moment so its user auth and relay settings should work fine} ensure your firewall allows users to connect to the new service then after testing with one user, migrate all users to using 587 then remove authentication and relay from the options available on your port25 service {making it an incoming mail only listener} also for any exchange setup I'd recommend ensuring you have backscatter dealt with also, feel free to look at the outdated but links are still good howto here http://www.alandoherty.net/info/mailservers/exchange/ and if any seems to much i can always assist via vnc/rdp or whatever {i personally prefer a server initiated {ultra}vnc connection as it requires you giving me 0 auth details and opening no incoming connections on your firewall, and thus me not being a suspect in any crackery later} >from >http://support.microsoft.com/search/default.aspx?mode=r&query=exchange+ 2003+smtp&spid=global&catalog=LCID%3D1033&1033comm=1&res=20 >----- >SPF FAQ: http://www.openspf.org/FAQ >Common mistakes: http://www.openspf.org/FAQ/Common_mistakes > > - Steve Yates > - ITS, Inc. > - Carl Sagan as a child: "There must be HUNDREDS of 'em!" > >~ Taglines by Taglinator: www.srtware.com ~ > > >------------------------------------------- >Sender Policy Framework: http://www.openspf.org [http://www.openspf.org] >Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/] > >Archives: https://www.listbox.com/member/archive/1020/=now >RSS Feed: https://www.listbox.com/member/archive/rss/1020/ >Powered by Listbox: http://www.listbox.com ------------------------------------------- Sender Policy Framework: http://www.openspf.org [http://www.openspf.org] Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/] Archives: https://www.listbox.com/member/archive/1020/=now RSS Feed: https://www.listbox.com/member/archive/rss/1020/ Powered by Listbox: http://www.listbox.com ------------------------------------------- Sender Policy Framework: http://www.openspf.org [http://www.openspf.org] Modify Your Subscription: http://www.listbox.com/member/ [http://www.listbox.com/member/] Archives: https://www.listbox.com/member/archive/1020/=now RSS Feed: https://www.listbox.com/member/archive/rss/1020/ Powered by Listbox: http://www.listbox.com
|