Hi, I just signed up with Google Message Security and am in the
process of locking down our smtp service. The recommended way seems to
be to set firewall rules or restrictions in Exchange to only allow
connections from Postini's IP range. How can I allow mobile users to
send email through us? Normally, mobile users enter their credentials
and log into our smtp server to relay messages through it, but they
won't be able to do this if they're blocked at the connection level.
Can they enter Postini's smtp server as their outgoing server & use
their Postini user credentials?
> Hi, I just signed up with Google Message Security and am in the
> process of locking down our smtp service. The recommended way seems to
> be to set firewall rules or restrictions in Exchange to only allow
> connections from Postini's IP range. How can I allow mobile users to
> send email through us? Normally, mobile users enter their credentials
> and log into our smtp server to relay messages through it, but they
> won't be able to do this if they're blocked at the connection level.
> Can they enter Postini's smtp server as their outgoing server & use
> their Postini user credentials?
On their mobile devices, they enter mail.ourdomain.com as the outgoing
smtp server, along with their usernames/passwords. We've set up an SSL
certificate for our SMTP port & allow secure connections. When mobile
users send a message, their devices connect to the smtp port,
establish a secure connection & authenticate. We've set up Exchange to
allow authenticated users to relay messages, so they can send messages
internally or to addresses outside of our domain.
Maybe I need to set up another smtp server on an alternative port for
mobile users? I suppose that might work. I'll have to make sure
everyone's devices support entering an alternative port.
> > Hi, I just signed up with Google Message Security and am in the
> > process of locking down our smtp service. The recommended way seems to
> > be to set firewall rules or restrictions in Exchange to only allow
> > connections from Postini's IP range. How can I allow mobile users to
> > send email through us? Normally, mobile users enter their credentials
> > and log into our smtp server to relay messages through it, but they
> > won't be able to do this if they're blocked at the connection level.
> > Can they enter Postini's smtp server as their outgoing server & use
> > their Postini user credentials?
> On their mobile devices, they enter mail.ourdomain.com as the outgoing
> smtp server, along with their usernames/passwords. We've set up an SSL
> certificate for our SMTP port & allow secure connections. When mobile
> users send a message, their devices connect to the smtp port,
> establish a secure connection & authenticate. We've set up Exchange to
> allow authenticated users to relay messages, so they can send messages
> internally or to addresses outside of our domain.
> Maybe I need to set up another smtp server on an alternative port for
> mobile users? I suppose that might work. I'll have to make sure
> everyone's devices support entering an alternative port.
> On Apr 9, 12:07 pm, FrankM wrote:
> > How are they sending to the server now?
> > On Apr 8, 2:15 pm, Jerry wrote:
> > > Hi, I just signed up with Google Message Security and am in the
> > > process of locking down our smtp service. The recommended way seems to
> > > be to set firewall rules or restrictions in Exchange to only allow
> > > connections from Postini's IP range. How can I allow mobile users to
> > > send email through us? Normally, mobile users enter their credentials
> > > and log into our smtp server to relay messages through it, but they
> > > won't be able to do this if they're blocked at the connection level.
> > > Can they enter Postini's smtp server as their outgoing server & use
> > > their Postini user credentials?
Yes. I spent all of today (I'm not really an IT guy--I'm an embedded
engineer who also happens to be tasked with IT) setting up a second
SMTP virtual server on port 465 of our 2003 small business server.
Once I got it to work, I was able to lock down port 25 such that only
Message Security can connect to it. Port 465 is locked down such that
only authenticated users can access it. It seems to work. Messages
coming from users on port 465 are delivered internally or relayed out
to Message Security. The outgoing messages that are relayed to Message
Security appear to come from our server's IP address, so they don't
fail SPF.
I think this will work for us, but if you have a simpler solution, I'd
be happy to hear it.
> Are you using Message Security for outbound filtering?
> On Apr 9, 3:13 pm, Jerry wrote:
> > On their mobile devices, they enter mail.ourdomain.com as the outgoing
> > smtp server, along with their usernames/passwords. We've set up an SSL
> > certificate for our SMTP port & allow secure connections. When mobile
> > users send a message, their devices connect to the smtp port,
> > establish a secure connection & authenticate. We've set up Exchange to
> > allow authenticated users to relay messages, so they can send messages
> > internally or to addresses outside of our domain.
> > Maybe I need to set up another smtp server on an alternative port for
> > mobile users? I suppose that might work. I'll have to make sure
> > everyone's devices support entering an alternative port.
> > On Apr 9, 12:07 pm, FrankM wrote:
> > > How are they sending to the server now?
> > > On Apr 8, 2:15 pm, Jerry wrote:
> > > > Hi, I just signed up with Google Message Security and am in the
> > > > process of locking down our smtp service. The recommended way seems to
> > > > be to set firewall rules or restrictions in Exchange to only allow
> > > > connections from Postini's IP range. How can I allow mobile users to
> > > > send email through us? Normally, mobile users enter their credentials
> > > > and log into our smtp server to relay messages through it, but they
> > > > won't be able to do this if they're blocked at the connection level.
> > > > Can they enter Postini's smtp server as their outgoing server & use
> > > > their Postini user credentials?