Mail relay/scanner server set up question....

[Mike Kercher]

I *think* having the entries in access would allow ANYONE to relay mail
through your MX if the sent it from an @domain1.com address.

Mike


-----Original Message-----
From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
Of Rob
Sent: Wednesday, May 11, 2005 12:10 PM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Mail relay/scanner server set up question....

Is there any difference in either being in the relay-domains or the access?
And what is the difference of doing esmtp rather than smtp....

I apologize if I am going off subject here...

Rob...


----- Original Message -----
From: "Mike Kercher" <mike at CAMAROSS.NET>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, May 11, 2005 1:00 PM
Subject: Re: Mail relay/scanner server set up question....


>I can't help you on the postfix side, but on the sendmail MX box, I'd
>remove  the /etc/mail/access entries for RELAY.
>
> Add each domain you relay mail for to /etc/mail/relay-domains
>
> Then, in your /etc/mail/mailertable, add an entry for each domain:
>
> domain1.com             esmtp:[192.168.1.100]
> domain2.com             esmtp:[192.168.1.101]
>
> Then, cd /etc/mail;make to hash everything and RESTART MailScanner.
> You need to restart so that the sendmail processes will reread their
> configuration.
>
> Mike
>
>
> ________________________________
>
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Rob
> Sent: Wednesday, May 11, 2005 9:52 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Mail relay/scanner server set up question....
>
>
> Hello all, I was on this list, but went away for a while and now I am
> back....
>
>
> I have a set up doing this but not sure if it is the correct way, if
> anyone has any comments please send them my way....
>
> I host a 100 or so domains for email and we hosting... to take a load
> off of my mail server(SMTP & pop) I set up a server just to be the MX
> for these domains and once scanned by mailscanner relay it to the
> server that users pop off....
>
> here is how I did it, but not sure if it is the most efficient way...
>
> Server-2:  The SMTP & pop server, is a postfix(on Debian Sarge) server
> running with VHCS2 control panel, it was doing all the scanning but I
> turned it off via mailscanner conf file, so it does not scan for
> viruses or spam..
> This is where users pop their mail, they do not use it for sending
> outgoing email.
>
> Server-1: the  MX server is a Fedora core 2 running sendmail(8.12) and
> mailscanner....
> So email comes in gets scanned and sends it over to Server-2 The
> config for this in sendmail is...
>
> /etc/mail/access file has entries like this
>
> domain.com    RELAY
> domain2.com   RELAY
> and so on....
>
> /etc/mail/mailertable file has entries liek this...
>
> domain.com               smtp:[Server-2.com]
> domain2.com             smtp:[Server-2.com]
> and so on...
>
> dns zone file entries for each domain are like so....
>
> $TTL 3600
> @       IN      SOA     domain.com. root.domain.com. (
> ; dmn [domain.com] timestamp entry BEGIN.
>                         1111763982
> ; dmn [domain.com] timestamp entry END.
>                         8H
>                         2H
>                         4W
>                         1D )
>                 IN      NS      dns1.thednsguys.com.
>                 IN      NS      dns2.thednsguys.com.
>                 IN      NS      dns3.thednsguys.com.
>                 IN      MX      5 mx.server-1.com.
>                 IN      MX      10 mx2.thehostmasters.com.
>
> domain.com.  A       xxx.xxx.xxx.2
> ;ns             IN      A       xxx.xxx.xxx.2
> mail            IN      A       xxx.xxx.xxx.2
> www             CNAME   domain.com.
> ftp             CNAME   domain.com.
>
>
>
>
> Is this set up ok?
>
> Thanks and any help greatly appreciated...
>
> Have a great day!
>
> Rob...
>
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
> archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>
> ------------------------ MailScanner list ------------------------ To
> unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
> archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------ To
unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and the
archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!