1. I want to make sure that my configuration prevents
open relay.
I have the POP3 server set up to use Encrypted file
passwords.
Access: "Anonymous access" and "Integrated auth." options
are selected.
Relay: "Only in the list" (and I have nothing in the
list) and "Allow authenticated users to relay" are
selected. There seems to be a great deal of confusion on
this topic, and I think it stems from Anonymous access
being taken as a type of authentication method, when in
reality it is not.

So I guess my question is, if I have it set to use
Integrated Windows authentication, how is it
authenticating users trying to send mail, when I don't
have any accounts on the computer for these users... that
is, they are just set up using encrypted file access.

2. I want to use Authenticated POP access as the Windows
Help file specifies to use when doing Encrypted file
access, but I don't see any option to use this anywhere.

3. The web server's Alert e-mails will not send. I get
messages in the Badmail directory that the message can't
be sent. In the box to set the SMTP server to send from,
I have tried 127.0.0.1, the external IP address, the
computer name by itself, the computer's FQDN name... and
none work.

Thanks in advance.

[ Post a follow-up to this message ]

Hello,

> So I guess my question is, if I have it set to use
> Integrated Windows authentication, how is it
> authenticating users trying to send mail, when I don't
> have any accounts on the computer for these users... that
> is, they are just set up using encrypted file access.

SMTP does not work with Encrypted File, only the POP3 server does. SMTP uses
windows accounts.

Answer 2: Enable SPA on the server
Answer 3: You are probably not allowed to send. You can add the webserver's
IP to the list of allowed computers to relay, or send logon credentials.

Anonymous Access is an access option. Relay and access is NOT the same
thing. Relay is when you send an email, access is to be able to communicate
with the SMTP Server. Other SMTP servers must be able to communicate with
your server, to send emails to your server, and therefore Anonymous Access
is required. Other SMTP servers will however NOT relay using your server,
and that is the difference.


--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


<anonymous@discussions.microsoft.com> wrote in message
news:123701c47b6b$56b55ce0$a601280a@phx.gbl...
> 1. I want to make sure that my configuration prevents
> open relay.
> I have the POP3 server set up to use Encrypted file
> passwords.
> Access: "Anonymous access" and "Integrated auth." options
> are selected.
> Relay: "Only in the list" (and I have nothing in the
> list) and "Allow authenticated users to relay" are
> selected. There seems to be a great deal of confusion on
> this topic, and I think it stems from Anonymous access
> being taken as a type of authentication method, when in
> reality it is not.
>
> So I guess my question is, if I have it set to use
> Integrated Windows authentication, how is it
> authenticating users trying to send mail, when I don't
> have any accounts on the computer for these users... that
> is, they are just set up using encrypted file access.
>
> 2. I want to use Authenticated POP access as the Windows
> Help file specifies to use when doing Encrypted file
> access, but I don't see any option to use this anywhere.
>
> 3. The web server's Alert e-mails will not send. I get
> messages in the Badmail directory that the message can't
> be sent. In the box to set the SMTP server to send from,
> I have tried 127.0.0.1, the external IP address, the
> computer name by itself, the computer's FQDN name... and
> none work.
>
> Thanks in advance.

[ Post a follow-up to this message ]

Yes, POP3 uses SPA. However, SPA is not an option to
select when using Encrypted File.

My question was, what credentials are being used by the
SMTP server during the authentication process to allow
relaying? I have nothing in the Allowed list, and Allow
authenticated users to relay is selected, and I can send
mail out, so what credentials are being authenticated?

Thanks.

[ Post a follow-up to this message ]

I am also getting the Unable to relay for <> error, where
<> is the address of the mailbox I am trying to send to,
which is located on an external server. Mail from one
internal account to another seems to work fine.

[ Post a follow-up to this message ]

And as i said in my previos email:

"You are probably not allowed to send. You can add the webserver's
IP to the list of allowed computers to relay, or send logon credentials"

You can send to internal accounts, because that is not relaying.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


"Justin" <anonymous@discussions.microsoft.com> wrote in message
news:1af001c47c09$f3657900$a601280a@phx.gbl...
> I am also getting the Unable to relay for <> error, where
> <> is the address of the mailbox I am trying to send to,
> which is located on an external server. Mail from one
> internal account to another seems to work fine.

[ Post a follow-up to this message ]

What should my Outbound options on the Delivery tab look
like? I.e., security, and there is another dialog box I
believe.

Thanks, you have been helpful.

[ Post a follow-up to this message ]

This is not relevant to your problem. This is what it is written in the Help
file about this tab:

"Once a connection has been opened and the receiving server has acknowledged
that it is ready to receive data, messages can be transmitted for delivery"

You are having problems to relay, as said in the error message. You are not
even getting to delivery part, since the email does not even get it to your
server.

But for the Security, it should be Anonymous, unless you need something
else.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


"Justin" <anonymous@discussions.microsoft.com> wrote in message
news:1d5001c47cbe$9d2ab9f0$a301280a@phx.gbl...
> What should my Outbound options on the Delivery tab look
> like? I.e., security, and there is another dialog box I
> believe.
>
> Thanks, you have been helpful.

[ Post a follow-up to this message ]

Ok, I see what Outbound Security is for now. I thought it
was tellng my server what it needed its users to do to
send outgoing mail, but its really for the server its
connecting to, in order to send mail to it.

So if I want users to authenticate to the SMTP server in
order to relay (send an outgoing email to another SMTP
server) then I need to use Windows accounts or Active
Directory accounts, is this correct? In other words,
encrypted file has nothing to do with SMTP as you said,
only POP3, meaning that it does not provide
username/password authentication in order to relay. This
would mean that the Server 2003 Web Edition can't do what
I need, since it doesn't let me set up Active Directory
accounts.

[ Post a follow-up to this message ]

Hello,

> So if I want users to authenticate to the SMTP server in
> order to relay (send an outgoing email to another SMTP
> server) then I need to use Windows accounts or Active
> Directory accounts, is this correct?

Yes, that is correct!

> This
> would mean that the Server 2003 Web Edition can't do what
> I need, since it doesn't let me set up Active Directory
> accounts.

You have the option to set up local Windows Accounts.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!


"Justin" <anonymous@discussions.microsoft.com> wrote in message
news:24c501c47d92$2aef9ca0$a501280a@phx.gbl...
> Ok, I see what Outbound Security is for now. I thought it
> was tellng my server what it needed its users to do to
> send outgoing mail, but its really for the server its
> connecting to, in order to send mail to it.
>
> So if I want users to authenticate to the SMTP server in
> order to relay (send an outgoing email to another SMTP
> server) then I need to use Windows accounts or Active
> Directory accounts, is this correct? In other words,
> encrypted file has nothing to do with SMTP as you said,
> only POP3, meaning that it does not provide
> username/password authentication in order to relay. This
> would mean that the Server 2003 Web Edition can't do what
> I need, since it doesn't let me set up Active Directory
> accounts.

[ Post a follow-up to this message ]

Right, but the only reason local windows accounts won't
work for me is because I need to use the same mailbox
name across multiple domains.

I think I got it now. Thanks Kristofer, you've been so
very helpful 

[ Post a follow-up to this message ]