22.12.2012 Views

Front cover - IBM Redbooks

Front cover - IBM Redbooks

Front cover - IBM Redbooks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

hand in hand. In order to limit spam, relaying needs to be put in check. There are<br />

several options in Domino for controlling who is able to relay mail from your<br />

domain.<br />

More details on Domino spam control, beyond those included in this section, can<br />

be found in the <strong>IBM</strong> Redbook Lotus Domino 6 spam Survival Guide, SG24-6930.<br />

Inbound relay control<br />

An open relay is a server that sends an e-mail message when neither the sender<br />

nor the recipient is a local user. Spammers use open relays to send spam. In<br />

order to control spam, open relays must be closed.<br />

Use the inbound relay controls to define:<br />

► The destination domains to which you allow and deny relays<br />

► The originating hosts from which you allow and deny relays<br />

Note: In determining whether to allow a relay, Domino checks the original<br />

sender, not just the last hop domain. This prevents people from routing from a<br />

denied source through an accepted one to your domain.<br />

To block relays to a specific domain or from a specific host, set restrictions in the<br />

inbound relay controls on the server Configuration Settings document.<br />

(Router/SMTP → Restrictions and Controls → SMTP Inbound Controls).<br />

The inbound relay controls are set in four fields. The field names, meanings, and<br />

guidelines for entries in the fields are as follows:<br />

► Allow messages to be sent only to the following external Internet<br />

domains<br />

Internet domains to which Domino can relay messages. Domino relays<br />

messages to recipients in the specified domains only. Messages for<br />

recipients in other external Internet domains are denied.<br />

For example, if you enter abc.com and xyz.com in this field, Domino accepts<br />

only messages to recipients with addresses that end in abc.com or xyz.com<br />

domains. Messages for recipients in other domains are denied.<br />

To name a domain explicitly, prefix an @ sign to the entry. For example, if you<br />

enter @xyz.com the server relays messages only if the domain part of the<br />

address matches xyz.com exactly, such as User@xyz.com. Messages to<br />

addresses in other domains that end in xyz.com, such as User@uvwxyz.com<br />

or User@abc.xyz.com, are denied.<br />

Chapter 11. Domino/Notes 6 security features 513

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!