Re: Installing a mailgate on orange, IPCop v2.1.9

Hello again,

On Thu, 28 Apr 2016, Chris Bell wrote:

> Some important outgoing emails are being rejected as "relay not
> permitted" by the destination (but I have no control over that)

You're the only one who does have control over that!  And it almost
certainly isn't the destination which is rejecting the mail because
you're asking the destination to ACCEPT the mail, not to RELAY it.
Just stop trying to relay outgoing mail, it's been out of order for
decades and it's bound to cause problems.

> while incoming emails are not being properly filtered, so I want to
> set up my own mailgate

You'll discover when you start trying to do it that filtering mail is
not straightforward.  The outline I gave you in my previous message
has been in use by substantial businesses with many users for around
fifteen years, and will be more than adequate for your purposes.  By
instead running separate servers in the GREEN and ORANGE networks for
your mail you will just make yourself twice as much work to keep them
secure, and save nothing in effort needed for things like filtering.

> and set my fixed IP address as primary MX, sending by direct
> SMTP(S). Not having my own fixed IP address listed as MX causes
> problems if I send by direct SMTP(S).

No it doesn't.  Perhaps sending from a dynamic address does, but the
fact that it is or isn't listed as an MX is irrelevant.  A MX record
advertises the server or servers which ACCEPT mail for the domain.
Sending servers aren't specifically listed in DNS unless you implement
SPF, which I guess won't help you in any case because in my experience
most mail administrators have never heard of SPF - and those that have
get it horribly wrong - and they think that Microsoft must be right.
No sane recipient blocks mail because the server sending mail for a
domain isn't published in an MX record.

It's clear that you need to rid yourself of a lot of pre-conceived and
erroneous notions.  Spend some time reading about the basics before
you design your system.  Don't implement a mail system which, until
you understand mail systems better, will risk causing a nuisance on
the Internet and possibly worse.  Doing it right will save you, and a
lot of mail administrators like me, much grief in the long run.

-- 

73,
Ged.

------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user