Smtp Host Authentication; Unidentified Host Rejection - Novell GROUPWISE 8 - ADMINISTRATION Administration Manual

47.2.6 SMTP Host Authentication

The Internet Agent supports SMTP host authentication for both outbound and inbound message
traffic.
"Outbound Authentication" on page 779
"Inbound Authentication" on page 779
Outbound Authentication
For outbound authentication to other SMTP hosts, the Internet Agent requires that the remote SMTP
hosts support the AUTH LOGIN authentication method. To set up outbound authentication:
1 Include the remote SMTP host's domain name an authentication credentials in the
file, located in the
domain\wpgate\gwia
domain_name authuser
For example:
smtp.novell.com
2 If you have multiple SMTP hosts that require authentication before they accept messages from
your system, create an entry for each host. Make sure to include a hard return after the last
entry.
3 If you want to allow the Internet Agent to send messages only to SMTP hosts listed in the
file, use the following startup switch:
gwauth.cfg
/forceoutboundauth
With the /forceoutboundauth
the gwauth.cfg file, the sender receives an Undeliverable message.
Inbound Authentication
For inbound authentication from other SMTP hosts, you can use the
switch to ensure that the Internet Agent accepts messages only from SMTP hosts that use the AUTH
LOGIN authentication method to provide a valid GroupWise user ID and password. The remote
SMTP hosts can use any valid GroupWise user ID and password. However, for security reasons, we
recommend that you create a dedicated GroupWise user account for remote SMTP host
authentication.

47.2.7 Unidentified Host Rejection

You can have the Internet Agent reject messages from unidentified sources. The Internet Agent
refuses messages from a host if a DNS reverse lookup shows that a "PTR" record does not exist for
the IP address of the sender's host.
If you choose not to have the Internet Agent reject messages from unidentified hosts, it accepts
messages from any host, but it displays a warning if the sender's host is not authentic.
To configure the Internet Agent to reject messages from unidentified hosts:
1 In ConsoleOne, right-click the Internet Agent object, then click Properties.
2 Click SMTP/MIME > Security Settings to display the Security Settings page.
directory. The format is:
authpassword
remotehost novell
switch enabled, if a message is sent to an SMTP host not listed in
gwauth.cfg
/forceinboundauth startup
Managing Internet Access 779