Line 67: |
Line 67: |
| | | |
| ====POP3==== | | ====POP3==== |
− |
| |
| *I want to set my SMESERVER to allow POP3 but it's not an option, I only see POP3S. | | *I want to set my SMESERVER to allow POP3 but it's not an option, I only see POP3S. |
| The SMESERVER is secure by design. POP3 is viewed as inadequate security and removed as an option from a standard installation to encourage unknowing administrators to select the 'best practice' option -a secure connection with either POP3S or IMAPS. | | The SMESERVER is secure by design. POP3 is viewed as inadequate security and removed as an option from a standard installation to encourage unknowing administrators to select the 'best practice' option -a secure connection with either POP3S or IMAPS. |
Line 74: |
Line 73: |
| config setprop pop3 access public | | config setprop pop3 access public |
| signal-event email-update | | signal-event email-update |
| + | |
| | | |
| ====Real-time Blackhole List (RBL)==== | | ====Real-time Blackhole List (RBL)==== |
− |
| |
| *How do I enable RBL's? | | *How do I enable RBL's? |
| RBL's are disabled by default to allow maximum accommodation (your ISP may be on a RBL & you may not know it). You can enable RBL's by: | | RBL's are disabled by default to allow maximum accommodation (your ISP may be on a RBL & you may not know it). You can enable RBL's by: |
| config setprop qpsmtpd DNSBL enabled RHSBL enabled | | config setprop qpsmtpd DNSBL enabled RHSBL enabled |
| signal-event email-update | | signal-event email-update |
| + | |
| + | |
| + | ====Spam Filters==== |
| + | *I seem to get more spam from a SERVER-ONLY box compared to a SERVER-GATEWAY box. |
| + | Some of the spam filter rules cannot work unless the SMESERVER knows the external IP of the box. If you put a SMESERVER in server-only mode behind other firewalls, it will lose some of the anti-spam rules. For example, the rule that blocks attempts where spammers try "HELO a.b.c.d" where a.b.c.d is your external IP address. |
| + | |
| + | Unfortunately, many admins believe that port-forwarding SMTP provides additional security. It doesn't, it limits the SMESERVER's ability to apply some rules. |
| | | |
| ===Firewall/Port Forwarding,Opening,Blocking=== | | ===Firewall/Port Forwarding,Opening,Blocking=== |