4
Set up an account so it can only send to local recipients
Idea shared by Sabatino - 9/28/2023 at 3:10 AM
Proposed
I was pleasantly surprised to find that there is no way to configure a user to only send to users in their domain.
By disabling outbound SMTP on the user I was able to prevent him from sending out of the server.

I have found this option in almost every server I have administered.
I have multiple clients who on some users ask me for this feature.
It would be welcome if it were introduced.

Thank you
Sabatino Traini
      Chief Information Officer
Genial s.r.l. 
Martinsicuro - Italy

8 Replies

Reply to Thread
1
That's a great request! We have customers that need it and have it functional in other products.

Obiously they can't change to SmarterMail until this fucntion is present in it.
Gabriele Maoret - Head of SysAdmins at SERSIS Currently manages 6 SmarterMail installations (1 in the cloud for SERSIS which provides services to a few hundred third-party email domains + 5 on-premise for customers who prefer to have their mail server in-house)
0
Derek Curtis Replied
Employee Post
Derek Curtis COO SmarterTools Inc. www.smartertools.com
0
Hi Gabriele

I don't think there's much interest.
I think we should give up.
Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
0
Worse than I thought.
I had only tried it from webmail. Using the SMTP protocol and disabling outbound SMTP does not allow sending at all. not even to users of the same server.
Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
1
Derek Curtis Replied
Employee Post
Actually, if you disable Outbound SMTP for a user, you can send to local recipients across domains on the same server.

I tested this before my initial reply, and just tested it again. Sending from a local domain to my @smartertools account worked, as did sending to another user of the same initial domain. However, sending to Gmail failed, and the system message said as much: "Remote Server returned: '550 Outbound SMTP is not allowed'". 
Derek Curtis COO SmarterTools Inc. www.smartertools.com
0
SmarterMail Enterprise 100.0.8664.22089 (Sep 21, 2023)


Sorry but it doesn't work for me
This is how it works if I use webmail.

But if I use a client with SMTP, no

Here is the extract from the SMTP log
consider that the operator19@domain.tld account has outgoing SMTP disabled.
Which I'm trying to send to operator18@domain.tld so not only the same server but the same domain


[2023.10.02] 16:35:15.766 [xx.xx.xx.xx][22995877] rsp: 220 smtp.mserv.tld
[2023.10.02] 16:35:15.766 [xx.xx.xx.xx] [22995877] connected on 2/10/2023 16:35:15
[2023.10.02] 16:35:15.766 [xx.xx.xx.xx][22995877] International dialing code: IT
[2023.10.02] 16:35:15.797 [xx.xx.xx.xx] [22995877] cmd: EHLO [192.168.1.18]
[2023.10.02] 16:35:15.813 [xx.xx.xx.xx][22995877] rsp: 250-smtp.mserv.tld Hello [xx.xx.xx.xx]250-SIZE 699050666250-AUTH LOGIN CRAM-MD5250-STARTTLS250-8BIT MIME250-DSN250OK
[2023.10.02] 16:35:15.844 [xx.xx.xx.xx] [22995877] cmd: STARTTLS
[2023.10.02] 16:35:15.844 [xx.xx.xx.xx][22995877] rsp: 220 Start TLS negotiation
[2023.10.02] 16:35:15.922 [xx.xx.xx.xx] [22995877] cmd: EHLO [192.168.1.18]
[2023.10.02] 16:35:15.922 [xx.xx.xx.xx][22995877] rsp: 250-smtp.mserv.tld Hello [xx.xx.xx.xx]250-SIZE 699050666250-AUT LOGIN CRAM-MD5250-8BITMIME250-DS N250Okay
[2023.10.02] 16:35:16.032 [xx.xx.xx.xx][22995877] cmd: AUTH LOGIN.
[2023.10.02] 16:35:16.032 [xx.xx.xx.xx][22995877] rsp: 334 yyyyyy
[2023.10.02] 16:35:16.063 [xx.xx.xx.xx][22995877] Authenticate as operator19@domain.tld
[2023.10.02] 16:35:16.063 [xx.xx.xx.xx] [22995877] rsp: 334 yyyyy
[2023.10.02] 16:35:16.094 [xx.xx.xx.xx] [22995877] Authentication failed: Outbound SMTP blocked (Outbound SMTP setting disabled)
[2023.10.02] 16:35:16.094 [xx.xx.xx.xx] [22995877] rsp: 535 Authentication failed





Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
1
Hi Derek from webmail it works as described by you. But not from an smtp client

This is all crazy though.
To resolve with the customer I set up an exit gateway on the affected domain to another mailserver

On the other mail server I set the rules indicating that if the sender is operatorex@domain.tld and the recipient is different from @domain.tld it is rejected

I consider sm superior for mail services to other mail servers and am changing everywhere to install SM

Unfortunately I'm sorry to find missing functions like this.

Analyzing SM, not only does it lack the account level setting to indicate "send only to local domains" but also a content filter that acts on the entire SMTP service.

Considerations:

1) Content Filter only acts on incoming SMTP connections and therefore doesn't actually allow me full configuration.
I could use the events on category email and type send message. It's a shame, however, that reject is missing from the actions. Here too I would be curious to understand why.

2) I realized that a content filter at server level is missing. So if I need to do an action (remove, delete, reject) based on a rule, for example specific sender or content, I cannot do it at the entire server level. and now that I remembered, I actually needed to reject a specific sender and I couldn't do it. I put it in the antispam by adding 100 to the weight and thus forcing it to end up in quarantine.
Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy
1
Excuse me. some news on this
Sabatino Traini Chief Information Officer Genial s.r.l. Martinsicuro - Italy

Reply to Thread