Wow, Thomas, thank you for all that great information. I have a few comments and a crucial question, inline.
[quote user="Thomas R. Stephenson"]> Thank you for your reply, Thomas.
>
> We have a DSL account with ATT, and our website is hosted off-site. We
> have a number of email accounts off-site, like engineering@mydomain.com,
> etc., plus others, where the users need to get and respond to those
> emails. To do that with ATT's smtp server, you have to authenticate as
> their user, and substitute the From: address. Any client does that.
You need to setup a postmaster@mydomain.com so that failures of mail sent from user@mydomain.com can be properly reported if nothing else. It also will allow other to report problems with your mailings to the system admin. You could then set the name of the system to mydomain.com.
You should also setup maiser@mydomain.com so that people from the outside can send to the mail server to subscribe and unsubscribe from the mailing lists.
[/quote]
I have a question about this, below.
[quote]
>
> What I have been doing is getting all mail inbound off existing pop3
> mailboxes from various locations with MercuryD, and sending out
> using one of our ATT accounts with MercuryC. MercuryI handles IMAP
> for users on the LAN. That way the box stays behind the firewall
> and uses a local IP address.
OK.
>
> So, up until today, I haven't been using Mercury as a 'real' server
> at all, at least not to the internet. And there have not been any
> problems delivering mail, since with outgoing mail, I'm just a
> client to ATT's smtp server.
How does mail to postmaster@mydomain.com get handled?
[/quote]
At present, it doesn't, because there is no mydomain.com. Just the local IP address. Inside the lan, postmaster@192.168.1.24 works. See my question below, please.
[quote]
>
> It ran a long time like that -- get 'em in with POP3, let the users
> access with IMAP, send 'em out using the ATT SMTP.
>
> Now, the first thing that happened is that ATT decided to require
> SSL connections to their POP3 and SMTP servers. So I had to upgrade
> to the current version of Mercury.
Ok, that's seem like a good idea. Since all connections are authenticated then they do not have problems with the bad guys working their servers for outbound mail.
>
> The second thing they did is to require verification of email
> addresses to be used in the From: part of the header. So, for every
> user replying to messages using an off-site mailbox, I had to go to
> their website, register it, and confirm, if I wanted to send using
> their SMTP server. Although irritating, all is well and good.
Why in the world are they doing this. All it does is annoy the customers, has little or no affect on spammers.
[/quote]
I couldn't agree more. What are the odds of someone sniffing an SSL'd connection? On the other hand, it would block someone's compromised box if it forges the headers. Recently we have been getting some bounce messages on one of our accounts. Viewing them in detail, it looks like they were sent from boxes all over the world, to boxes all over the world, using the unfortunate salesman's address as the sender. That's what they are out to block, I guess. I can guarantee that none of those messages left his machine, because his only way out of here is through Mercury and thence through a very picky firewall that logs everything. Not to mention all the other layers of protection in place, and there are multiples of those. Gotta love Winderz!
[quote]
>
> The bad part of this is that under these conditions, any address not
> previously registered results in a response,
>
> 553 From: address not verified; see http://help.yahoo.com/l/us/yahoo/mail/original/manage/sendfrom-07.html<cr><lf>,
>
> which response causes Mercury to crash.
That I cannot understand. This response line looks quite normal except for the trailing comma. Do you have a MercuryC session log showing this crash? I would like to see this for review.
[/quote]
I added that comma, sorry. The line is pasted from a log.
I don't have a log from when it crashed, or nothing got saved to it when it did crash. Later on when the system isn't under use I will attempt to reproduce the crash with all logging turned on and see if I can turn something up. It runs fine as long as I don't reproduce that condition. So I'll get back to you on it.
[quote]
>
> Anyway, I can get around that.
>
> But today I decided I wanted to start a little mailing list. I've
> done it before, and I've got everything working now, using the
> remote servers. Except this one thing:
>
> The From: address is the postmaster's address. And, I wanted to
> make the mail coming from the list read, From: the mailing list
> email address. I coulda sworn that's what it was before (a few
> years back), but I'm greying and my brain is calcifying, so I'm
> probably wrong about that.
It's never been the mailing list. The To: field is the mailing list and the sender field should be as well.
[/quote]
OK, thanks. It was another program I was thinking of that allows you to do that (but it's old and doesn't do SSL).
The memory is the first thing to go, and I can't remember what the other thing is.
[quote]
>
>
> Right now the postmaster's address is a local account, "admin",
> aliased to admin@192.168.1.24. (The IP of the machine running
> Mercury.)
This address should be admin@[192.168.1.24] and this IP should be in the domains list as well.
[/quote]
OK, I'll change the postmaster address. Should I delete the alias then? The IP is in the domains list.
[quote]
> It might be all bolluxed up that way, but it's been
> working. It allows me to get the mail, and it heeds the warning
> about making the postmaster a remote mailbox. And it never ever
> loops or anything. I get the admin mail using IMAP on the same
> machine. Here's why I did that: "The postmaster account is usually
> an alias to a real user on your system, and this is the expectation
> within Mercury. Enter in this field the username of the user on the
> machine where Mercury is running who is to act as your postmaster.
> While it is permissible to have a non-local address as your
> postmaster address, we strongly recommend you do not do this, since
> it can create real problems and mail loops when the remote machine
> is unreachable."
>
> Now, I could get around this whole deal if I expose the box to the
> internet and set it up to run MercuryE and deliver mail directly.
I doubt if this would help all that much. You are already sending using MercuryC so sending via MercuryE would not change all that much. That said, I'm not at all sure that would help since I'm quite sure AT&T (Yahoo) is already blocking port 25.
[/quote]
No, I have a commercial account and can host servers if I want to.
[quote]
I would recommend you get a GMail account and point MercuryC at the GMail SMTP host
As long as your really do not abuse the server with MBytes OS mail you could make the same SSL connection to GMail as you do to your ISP and GMail does not even look at the From: addresses.
(b) -SMTP STARTTLS -
Server host name: smtp.gmail.com
Server TCP/IP port: 587
SSL/TLS: via STARTTLS
Enable server certificate fingerprint tracking: checked
SMTP Authentication: Login to the SMTP server using POP3
username/password (the GMAIL-POP3-definition has been chosen)
(c) - SMTP via SSL -
Server host name: smtp.gmail.com
Server TCP/IP port: 465
SSL/TLS: via direct ssl connection
Enable server certificate fingerprint tracking: unchecked
SMTP Authentication: Login to the SMTP server using POP3
username/password (the GMAIL-POP3-definition has been chosen)
[/quote]
Now there's an idea I hadn't thought of. Thank you!
[quote]
> But first, I expect I will have to learn how to set up the
> postmaster and domain name properly. Then, if one of my neighbors
> in the same netblock gets hacked, I will end up in a black hole, and
> our business emails won't get delivered. And then all of my
> trusting users will come after me with pitchforks, daggers, and
> flaming arrows for sure.
You got it.
> Plus, I'd have to add a nic to give access from the lan, or else go all
> out and register a domain and set the thing up as a real server. Which I
> could do, done it before, but I've been trying not to have to admin a
> Windows server on the internet if I can avoid it. (I have a real job
> here, too!)
>
> So, my questions are: Did I completely misunderstand the
> instructions about the postmaster account? Could I run into
> problems if I set up an external email account as postmaster, and my
> connection to the internet fails? Is there any way to get the list
> address as the From: address on outgoing list messages?
You must set the postmaster account to one of your local users. This is what you have done. However mail sent from the outside world must be able to be received by postmaster@mydomain.com and this is something you have not done.
>
> Sorry for being so windy, Thomas. Your insightful help on this
> forum is golden, and I appreciate it. Thanks!
[/quote]
So now my question: If I keep the box behind the nat'ed firewall on a private IP, etc, how to I get mail from the outside to be received by postmaster@mydomain.com, unless I set that address to an external email address against the advice given in the help file? I'm a little cornfounded on the way this all gets used. I can understand completely how it would be used if dns points mydomain.com directly to my machine. But what if there is no mydomain.com? My guess would be that in this case I must use the external email address. But I'm not sure what problems will ensue from that.
There are other ways to skin this (mailing list behind a nat router) cat, but if it is possible I'd sure like to do it with Mercury on this box.
Thank you for your most generous assistance.
<p>Wow, Thomas, thank you for all that great information.&nbsp; I have a few comments and a crucial question, inline.&nbsp;</p><p>&nbsp;</p><p>[quote user="Thomas R. Stephenson"]&gt; Thank you for your reply, Thomas.
&gt;
&gt; We have a DSL account with ATT, and our website is hosted off-site.&nbsp; We
&gt; have a number of email accounts off-site, like engineering@mydomain.com,
&gt; etc., plus others, where the users need to get and respond to those
&gt; emails.&nbsp; To do that with ATT's smtp server, you have to authenticate as
&gt; their user, and substitute the From: address.&nbsp; Any client does that.&nbsp;
You need to setup a postmaster@mydomain.com so that failures of mail sent from user@mydomain.com can be properly reported if nothing else.&nbsp; It also will allow other to report problems with your mailings to the system admin. You could then set the name of the system to mydomain.com. &nbsp;
You should also setup maiser@mydomain.com so that people from the outside can send to the mail server to subscribe and unsubscribe from the mailing lists.
[/quote]</p><p>I have a question about this, below.</p><p>[quote]
</p><p>
&gt;
&gt; What I have been doing is getting all mail inbound off existing pop3
&gt; mailboxes from various locations with MercuryD, and sending out
&gt; using one of our ATT accounts with MercuryC.&nbsp; MercuryI handles IMAP
&gt; for users on the LAN.&nbsp; That way the box stays behind the firewall
&gt; and uses a local IP address.
OK.
&gt;
&gt; So, up until today, I haven't been using Mercury as a 'real' server
&gt; at all, at least not to the internet.&nbsp; And there have not been any
&gt; problems delivering mail, since with outgoing mail, I'm just a
&gt; client to ATT's smtp server.
How does mail to postmaster@mydomain.com get handled?</p><p>[/quote]</p><p>At present, it doesn't, because there is no mydomain.com.&nbsp; Just the local IP address.&nbsp; Inside the lan, postmaster@192.168.1.24 works.&nbsp; See my question below, please.</p><p>[quote]
&gt;
&gt; It ran a long time like that -- get 'em in with POP3, let the users
&gt; access with IMAP, send 'em out using the ATT SMTP.
&gt;
&gt; Now, the first thing that happened is that ATT decided to require
&gt; SSL connections to their POP3 and SMTP servers.&nbsp; So I had to upgrade
&gt; to the current version of Mercury.
Ok, that's seem like a good idea.&nbsp; Since all connections are authenticated then they do not have problems with the bad guys working their servers for outbound mail.
&gt;
&gt; The second thing they did is to require verification of email
&gt; addresses to be used in the From: part of the header.&nbsp; So, for every
&gt; user replying to messages using an off-site mailbox, I had to go to
&gt; their website, register it, and confirm, if I wanted to send using
&gt; their SMTP server.&nbsp; Although irritating, all is well and good.
Why in the world are they doing this.&nbsp; All it does is annoy the customers, has little or no affect on spammers.</p><p>[/quote]</p><p>I couldn't agree more.&nbsp; What are the odds of someone sniffing an SSL'd connection?&nbsp; On the other hand, it would block someone's compromised box if it forges the headers.&nbsp; Recently we have been getting some bounce messages on one of our accounts.&nbsp; Viewing them in detail, it looks like they were sent from boxes all over the world, to boxes all over the world, using the unfortunate salesman's address as the sender.&nbsp; That's what they are out to block, I guess.&nbsp; I can guarantee that none of those messages left his machine, because his only way out of here is through Mercury and thence through a very picky firewall that logs everything.&nbsp; Not to mention all the other layers of protection in place, and there are multiples of those.&nbsp; Gotta love Winderz!
</p><p>[quote]
&gt;
&gt; The bad part of this is that under these conditions, any address not
&gt; previously registered results in a response,
&gt;
&gt; 553 From: address not verified; see http://help.yahoo.com/l/us/yahoo/mail/original/manage/sendfrom-07.html&lt;cr&gt;&lt;lf&gt;,
&gt;
&gt; which response causes Mercury to crash.
That I cannot understand.&nbsp; This response line looks quite normal except for the trailing comma.&nbsp; Do you have a MercuryC session log showing this crash?&nbsp; I would like to see this for review. &nbsp;</p><p>[/quote]</p><p>I added that comma, sorry.&nbsp; The line is pasted from a log.
I don't have a log from when it crashed, or nothing got saved to it when it did crash.&nbsp; Later on when the system isn't under use I will attempt to reproduce the crash with all logging turned on and see if I can turn something up.&nbsp; It runs fine as long as I don't reproduce that condition.&nbsp; So I'll get back to you on it.</p><p>[quote]
&gt;
&gt; Anyway, I can get around that.
&gt;
&gt; But today I decided I wanted to start a little mailing list.&nbsp; I've
&gt; done it before, and I've got everything working now, using the
&gt; remote servers.&nbsp; Except this one thing:
&gt;
&gt; The From: address is the postmaster's address.&nbsp; And, I wanted to
&gt; make the mail coming from the list read, From:&nbsp; the mailing list
&gt; email address.&nbsp; I coulda sworn that's what it was before (a few
&gt; years back), but I'm greying and my brain is calcifying, so I'm
&gt; probably wrong about that.
It's never been the mailing list.&nbsp; The To: field is the mailing list and the sender field should be as well.</p><p>[/quote]</p><p>OK, thanks.&nbsp; It was another program I was thinking of that allows you to do that (but it's old and doesn't do SSL).&nbsp; </p><p>The memory is the first thing to go, and I can't remember what the other thing is.&nbsp;</p><p>[quote]
&gt; &nbsp;
&gt;
&gt; Right now the postmaster's address is a local account, "admin",
&gt; aliased to admin@192.168.1.24.&nbsp; (The IP of the machine running
&gt; Mercury.)
This address should be admin@[192.168.1.24] and this IP should be in the domains list as well.</p><p>[/quote]</p><p>OK, I'll change the postmaster address. Should I delete the alias then?&nbsp; The IP is in the domains list.</p><p>[quote]
&gt; It might be all bolluxed up that way, but it's been
&gt; working.&nbsp; It allows me to get the mail, and it heeds the warning
&gt; about making the postmaster a remote mailbox.&nbsp; And it never ever
&gt; loops or anything.&nbsp; I get the admin mail using IMAP on the same
&gt; machine.&nbsp; Here's why I did that: "The postmaster account is usually
&gt; an alias to a real user on your system, and this is the expectation
&gt; within Mercury. Enter in this field the username of the user on the
&gt; machine where Mercury is running who is to act as your postmaster.
&gt; While it is permissible to have a non-local address as your
&gt; postmaster address, we strongly recommend you do not do this, since
&gt; it can create real problems and mail loops when the remote machine
&gt; is unreachable."
&gt;
&gt; Now, I could get around this whole deal if I expose the box to the
&gt; internet and set it up to run&nbsp; MercuryE and deliver mail directly.
I doubt if this would help all that much.&nbsp; You are already sending using MercuryC so sending via MercuryE would not change all that much.&nbsp; That said, I'm not at all sure that would help since I'm quite sure AT&amp;T (Yahoo) is already blocking port 25. &nbsp;</p><p>[/quote]</p><p>No, I have a commercial account and can host servers if I want to.</p><p>[quote]
I would recommend you get a GMail account and point MercuryC at the GMail SMTP host
As long as your really do not abuse the server with MBytes OS mail you could make the same SSL connection to GMail as you do to your ISP and GMail does not even look at the From: addresses.
(b) -SMTP STARTTLS -
&nbsp; Server host name: smtp.gmail.com
&nbsp; Server TCP/IP port: 587
&nbsp; SSL/TLS: via STARTTLS
&nbsp; Enable server certificate fingerprint tracking: checked
&nbsp; SMTP Authentication: Login to the SMTP server using POP3
&nbsp; username/password (the GMAIL-POP3-definition has been chosen)
(c) - SMTP via SSL -
&nbsp; Server host name: smtp.gmail.com
&nbsp; Server TCP/IP port: 465
&nbsp; SSL/TLS: via direct ssl connection
&nbsp; Enable server certificate fingerprint tracking: unchecked
&nbsp; SMTP Authentication: Login to the SMTP server using POP3
&nbsp; username/password (the GMAIL-POP3-definition has been chosen)</p><p>[/quote]</p><p>Now there's an idea I hadn't thought of.&nbsp; Thank you!</p><p>[quote]
&gt; But first, I expect I will have to learn how to set up the
&gt; postmaster and domain name properly.&nbsp; Then, if one of my neighbors
&gt; in the same netblock gets hacked, I will end up in a black hole, and
&gt; our business emails won't get delivered.&nbsp; And then all of my
&gt; trusting users will come after me with pitchforks, daggers, and
&gt; flaming arrows for sure.&nbsp;
You got it.
&gt; Plus, I'd have to add a nic to give access from the lan, or else go all
&gt; out and register a domain and set the thing up as a real server. Which I
&gt; could do, done it before, but I've been trying not to have to admin a
&gt; Windows server on the internet if I can avoid it. (I have a real job
&gt; here, too!)
&gt;
&gt; So, my questions are: Did I completely misunderstand the
&gt; instructions about the postmaster account?&nbsp;&nbsp; Could I run into
&gt; problems if I set up an external email account as postmaster, and my
&gt; connection to the internet fails?&nbsp; Is there any way to get the list
&gt; address as the From: address on outgoing list messages?
You must set the postmaster account to one of your local users.&nbsp; This is what you have done.&nbsp; However mail sent from the outside world must be able to be received by postmaster@mydomain.com and this is something you have not done.
&gt;
&gt; Sorry for being so windy, Thomas.&nbsp; Your insightful help on this
&gt; forum is golden, and I appreciate it.&nbsp; Thanks!
[/quote]</p><p>So now my question: If I keep the box behind the nat'ed firewall on a private IP, etc, how to I get mail from the outside to be received by postmaster@mydomain.com, unless I set that address to an external email address against the advice given in the help file?&nbsp; I'm a little cornfounded on the way this all gets used.&nbsp; I can understand completely how it would be used if dns points mydomain.com directly to my machine.&nbsp; But what if there is no mydomain.com?&nbsp; My guess would be that in this case I must use the external email address.&nbsp; But I'm not sure what problems will ensue from that.</p><p>There are other ways to skin this (mailing list behind a nat router) cat, but if it is possible I'd sure like to do it with Mercury on this box.</p><p>Thank you for your most generous assistance.&nbsp;</p>