Hello,
I need to setup an IIS 6 servers SMTP service for POP3 users to use as their
outgoing SMTP server.
How does one configure this server to authenticate the clients so that it is
not used as an open-relay server. How do the Outlook POP3 clients get
confgured and is there some type of certificate or integration with Active
Directory required?
Thank you,
Hi,
>How does one configure this server to authenticate the clients so that it
>is
>not used as an open-relay server.
See:
http://www.gafvert.info/EmailServer-2.htm#ConfigureSMTPServe r
How do the Outlook POP3 clients get
>confgured and is there some type of certificate or integration with Active
>Directory required?
You do not need Active Directory, but you can use it if you want.
This will answer your other question:
http://www.gafvert.info/EmailServer-2.htm#Configure
Hope this helps.
--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info
Danno wrote:
>Hello,
>
>I need to setup an IIS 6 servers SMTP service for POP3 users to use as
>their
>outgoing SMTP server.
>
>How does one configure this server to authenticate the clients so that it
>is
>not used as an open-relay server. How do the Outlook POP3 clients get
>confgured and is there some type of certificate or integration with Active
>Directory required?
>
>Thank you,
Thanks for that information.
In my lab, I have successfully configured the POP3 server, in this case,
Exchange Server 2003, to require SPA [Basic Authentication-->Requires
SSL/TLS]. If I do NOT configure the POP3 client to "Log on using Secure
Password Authentication" it does not authenticate.
However, the outgoing SMTP server [which is not an Exchange Server, only IIS
SMTP server] continues to relay mail for the client when the client is NOT
configured for authentication.
The SMTP virtual server Authentication settings have the following enabled:
Anonymous access [which is required for servers on the Internet to relay
mail to the configured Remote Domains] and Integrated Windows Authentication
which I assumed would enable the integration with Active Directory for
authentication. What am I missing?
"Kristofer Gafvert" wrote:
> Hi,
>
> >How does one configure this server to authenticate the clients so that it
> >is
> >not used as an open-relay server.
>
> See:
> http://www.gafvert.info/EmailServer-2.htm#ConfigureSMTPServe r
>
> How do the Outlook POP3 clients get
> >confgured and is there some type of certificate or integration with Active
> >Directory required?
>
> You do not need Active Directory, but you can use it if you want.
> This will answer your other question:
>
> http://www.gafvert.info/EmailServer-2.htm#Configure
>
> Hope this helps.
>
> --
> Regards,
> Kristofer Gafvert
> http://www.gafvert.info/iis/ - IIS Related Info
>
>
> Danno wrote:
>
> >Hello,
> >
> >I need to setup an IIS 6 servers SMTP service for POP3 users to use as
> >their
> >outgoing SMTP server.
> >
> >How does one configure this server to authenticate the clients so that it
> >is
> >not used as an open-relay server. How do the Outlook POP3 clients get
> >confgured and is there some type of certificate or integration with Active
> >Directory required?
> >
> >Thank you,
>
From what you describe you have only configured authentication methods.
You have not configured relaying.
You need to configure relaying and set it to "Allow all computers which
successfully authenticate" and "Only the list below", and make sure the
list is empty.
--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info
Danno wrote:
>Thanks for that information.
>
>In my lab, I have successfully configured the POP3 server, in this case,
>Exchange Server 2003, to require SPA [Basic Authentication-->Requires
>SSL/TLS]. If I do NOT configure the POP3 client to "Log on using Secure
>Password Authentication" it does not authenticate.
>
>However, the outgoing SMTP server [which is not an Exchange Server, only
>IIS
>SMTP server] continues to relay mail for the client when the client is NOT
>configured for authentication.
>
>The SMTP virtual server Authentication settings have the following enabled:
>
>Anonymous access [which is required for servers on the Internet to relay
>mail to the configured Remote Domains] and Integrated Windows
>Authentication
>which I assumed would enable the integration with Active Directory for
>authentication. What am I missing?
>
>"Kristofer Gafvert" wrote:
>
>>Hi,
>>
>>>How does one configure this server to authenticate the clients so that it
>>>is
>>>not used as an open-relay server.
>>
>>See:
>>http://www.gafvert.info/EmailServer-2.htm#ConfigureSMTPSer ver
>>
>>How do the Outlook POP3 clients get
>>>confgured and is there some type of certificate or integration with
>>>Active
>>>Directory required?
>>
>>You do not need Active Directory, but you can use it if you want.
>>This will answer your other question:
>>
>>http://www.gafvert.info/EmailServer-2.htm#Configure
>>
>>Hope this helps.
>>
>>--
>>Regards,
>>Kristofer Gafvert
>>http://www.gafvert.info/iis/ - IIS Related Info
>>
>>
>>Danno wrote:
>>
>>>Hello,
>>>
>>>I need to setup an IIS 6 servers SMTP service for POP3 users to use as
>>>their
>>>outgoing SMTP server.
>>>
>>>How does one configure this server to authenticate the clients so that it
>>>is
>>>not used as an open-relay server. How do the Outlook POP3 clients get
>>>confgured and is there some type of certificate or integration with
>>>Active
>>>Directory required?
>>>
>>>Thank you,
>>
Hi,
Sorry - Relay Restrictions were configured as you described.
I think my disconnect is how to tell the Default SMTP Virtual Server that I
want mail clients (not servers) to authenticate, and to use Active Directory
for authentication.
I see the LDAP Routing tab which from the Help files seems to be where I
active this "AD" integration. Is that correct?
"Kristofer Gafvert" wrote:
> From what you describe you have only configured authentication methods.
> You have not configured relaying.
>
> You need to configure relaying and set it to "Allow all computers which
> successfully authenticate" and "Only the list below", and make sure the
> list is empty.
>
> --
> Regards,
> Kristofer Gafvert
> http://www.gafvert.info/iis/ - IIS Related Info
>
>
> Danno wrote:
>
> >Thanks for that information.
> >
> >In my lab, I have successfully configured the POP3 server, in this case,
> >Exchange Server 2003, to require SPA [Basic Authentication-->Requires
> >SSL/TLS]. If I do NOT configure the POP3 client to "Log on using Secure
> >Password Authentication" it does not authenticate.
> >
> >However, the outgoing SMTP server [which is not an Exchange Server, only
> >IIS
> >SMTP server] continues to relay mail for the client when the client is NOT
> >configured for authentication.
> >
> >The SMTP virtual server Authentication settings have the following enabled:
> >
> >Anonymous access [which is required for servers on the Internet to relay
> >mail to the configured Remote Domains] and Integrated Windows
> >Authentication
> >which I assumed would enable the integration with Active Directory for
> >authentication. What am I missing?
> >
> >"Kristofer Gafvert" wrote:
> >
> >>Hi,
> >>
> >>>How does one configure this server to authenticate the clients so that it
> >>>is
> >>>not used as an open-relay server.
> >>
> >>See:
> >>http://www.gafvert.info/EmailServer-2.htm#ConfigureSMTPSer ver
> >>
> >>How do the Outlook POP3 clients get
> >>>confgured and is there some type of certificate or integration with
> >>>Active
> >>>Directory required?
> >>
> >>You do not need Active Directory, but you can use it if you want.
> >>This will answer your other question:
> >>
> >>http://www.gafvert.info/EmailServer-2.htm#Configure
> >>
> >>Hope this helps.
> >>
> >>--
> >>Regards,
> >>Kristofer Gafvert
> >>http://www.gafvert.info/iis/ - IIS Related Info
> >>
> >>
> >>Danno wrote:
> >>
> >>>Hello,
> >>>
> >>>I need to setup an IIS 6 servers SMTP service for POP3 users to use as
> >>>their
> >>>outgoing SMTP server.
> >>>
> >>>How does one configure this server to authenticate the clients so that it
> >>>is
> >>>not used as an open-relay server. How do the Outlook POP3 clients get
> >>>confgured and is there some type of certificate or integration with
> >>>Active
> >>>Directory required?
> >>>
> >>>Thank you,
> >>
>