Dinsdag, 16. Augustus 2005
First review of Domino environment08/16/2005 08:09 PM Tech Talk
As you know I joined the NotesUserGroup Mentor program, so here it goes;
This weekend I did a review on my mentee´s Domino Directory, over the next
few weeks I will discuss the results here:
let´s start with e-mail: Smtp and Mime settings.
As I mentioned earlier RFC822 was not enabled, therefore the e-mail address
looked like this:
"Firstname.Lastname@Domain.Tld" <Firstname.Lastname@Domain.Tld>
we wanted the e-mail address to look like this:
"Firstname Lastname" <Firstname.Lastname@Domain.Tld>
This is what was changed in the Configuration documents: Mime -> Advanced
-> Advanced Outbound Options and changed the setting from <Do not
add phrase> to <Use CN as phrase>.
Then quit your router and smtp and restart them.
Next I want to look at SMTP settings:
in the Notes.ini section:
The SMTPGreeting is way to open about what can be found behind this server.
This could be more anonymous (we do not want any giveaways to these scriptkiddies
scanning our server). My advice would be to us an anonymous SmptGreeting
like this:
SMTPGreeting=Server Ready at %S
Router/Smtp ->Restrictions and Controls -> Restrictions:
Maximum message size = 0. This sound logical for a printing company...
Router/Smtp ->Restrictions and Controls -> Smtp Inbound Controls:
Relaying is effectively denied by this setting: Deny messages from external
internet domains to be sent to the following internet domains: *
This is a good thing!
Verify sender's domain in DNS: Disabled
Change this to Enabled will get rid of all messages from nonexistent domains,
found in Spam and things alike.
Router/Smtp -> Advanced -> Commands and Extensions:
| Inbound
SMTP Commands and Extensions:
| Outbound
SMTP Commands and Extensions:
|
| SIZE extension:
| Enabled
| SIZE extension:
| Enabled
|
| Piplining extension:
| Enabled
| Pipelining extension:
| Enabled
|
| DSN extension:
| Disabled
| DSN extension:
| Enabled
|
| 8 bit MIME extension:
| Disabled
| 8 bit MIME extension:
| Disabled
|
| HELP command:
| Enabled
|
|
|
| VRFY command:
| Disabled
|
|
|
| EXPN command:
| Disabled
|
|
|
| ETRN command:
| Disabled
|
|
|
| SSL negotiated over TCP/IP port:
| Disabled
|
| |
First of all, I would Enable DSN (Inbound and Outbound). This provides
for better end-user Error handling of Delivery Notifications and Return
Receipts (Return Receipts also need to be Enabled in Mime settings).
8-bit Mime; wouldn´t you like nice fancy messages? Then enabled both on
Inbound and Outbound.
HELP should be disabled, no need in telling the bad guys what commands
we support...
This page has been accessed 39 times.
?OpenAgent&3B4EA6E7BB380822C125705F0063BB7B)
-