在Domino SMTP服务器设置禁止用户匿名连接

字数 7548阅读 6602评论 3赞 2

用户的环境中，SMTP服务器接收MTA中继的外来邮件，同时移动用户也会通过SMTP验证后，向Internet发送外出邮件，现在管理员面临的问题是，时常收到垃圾邮件其中发件人伪造地址，使用了与收件人相同的 
Internet 域名地址，这样就不会被转发的限制设置限制，所以管理员希望限制匿名发送邮件。
管理员可以通过设置验证选项来提高DOMINO SMTP服务器的安全性，使其拒绝匿名的SMTP连接请求（如下图）： 
<div><a class="example-image-link" href="http://www.talkwithtrend.com/home/attachment/201209/24/168_1348452561Yhy9.gif" data-lightbox="example-set"><img class="example-image" src="http://www.talkwithtrend.com/home/attachment/201209/24/168_1348452561Yhy9.gif" ></a>
</div>
 从DOMINO 
5.0.6开始，可以用一个NOTES.INI参数：SMTPAllowConnectionsAnonymous。 如果在DOMINO 
SMTP服务器的NOTES.INI中把这个参数值设成1（SMTPAllowConnectionsAnonymous=1），
则在该服务器配置文档 > 路由器/SMTP > SMTP外来控制 >“仅允许从以下 SMTP Internet 主机名/IP 
地址进行连接”域中列出的主机名或IP地址就可以不经验证连接这个SMTP服务器了。
请注意，如果是IP地址的话，请将其写在方括号中.
<div><a class="example-image-link" href="http://www.talkwithtrend.com/home/attachment/201209/24/168_1348452563VpMz.jpg" data-lightbox="example-set"><img class="example-image" src="http://www.talkwithtrend.com/home/attachment/201209/24/168_1348452563VpMz.jpg" ></a>
</div>
 
我们来看一段Console.log
 
[03D8:0008-090C] 2012/08/08 下午 06:53:09 SMTP Server: domino852.lotustest.com 
(10.0.2.15) connected [03D8:0008-090C] 2012/08/08 下午 06:53:09 SMTP Server 
[03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 2012/08/08 下午 
06:53:09 SMTP Server [03D8:0008-090C] HELO command received [03D8:0008-090C] 
2012/08/08 下午 06:53:09 SMTP Server [03D8:0008-090C] Processing in Connected 
state [03D8:0008-090C] 2012/08/08 下午 06:53:09 SMTP Server [03D8:0008-090C] 
MAIL command received [03D8:0008-090C] 2012/08/08 下午 06:53:09 SMTP Server 
[03D8:0008-090C] 530 Authentication required
错误代码530 
要求身份验证，要求提供SMTP验证信息方可发送邮件 [03D8:0008-090C] 2012/08/08 下午 06:53:09 
SMTP Server [03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 
2012/08/08 下午 06:53:09 SMTP Server [03D8:0008-090C] QUIT command 
received [03D8:0008-090C] 2012/08/08 下午 06:53:09 SMTP Server 
[03D8:0008-090C] State change from Connected to Terminal [03D8:0008-090C] 
2012/08/08 下午 06:53:09 SMTP Server: domino852.lotustest.com (10.0.2.15) 
disconnected. 0 message[s] received [03D8:0002-0758] 2012/08/08 下午 06:53:18 
SMTP Server: List value SMTPAllowRelayHosts updated from configuration 
record SMTPAllowRelayHosts变更生效，取得配置文档中允许转发的IP地址
[03D8:0002-0758] 2012/08/08 下午 06:53:18 SMTP Server: Configured 
value: [03D8:0002-0758] 2012/08/08 下午 06:53:18 SMTP Server: 
 { [03D8:0002-0758] 2012/08/08 下午 06:53:18 SMTP Server: } 0 
entries. [03D8:0002-0758] 2012/08/08 下午 06:53:18 SMTP Server: List value 
SMTPRlyExcpts updated from configuration record
SMTPRlyExcpts变更生效，取得配置文档中转发例外的IP地址 [03D8:0002-0758] 
2012/08/08 下午 06:53:18 SMTP Server: Configured value: [03D8:0002-0758] 
2012/08/08 下午 06:53:18 SMTP Server: { [03D8:0002-0758] 2012/08/08 下午 
06:53:18 SMTP Server: } 0 entries. [03D8:0006-0B20] 2012/08/08 下午 
06:53:33.25 SMTP CIServ Listen> Connection Accepted on Port 25 for Session 
04D10001 [03D8:0008-090C] 2012/08/08 下午 06:53:33.26 SMTP CITask 
StateMachine> Sent 117 bytes to 10.0.2.15 [03D8:0008-090C] 
[03D8:0008-090C] S: 220 vbox-domino853.cn.ibm.com ESMTP Service (Lotus Domino 
Release 8.5.3FP1) ready at Wed, 8 Aug 2012 18:53:33 
+0800<CRLF> [03D8:0008-090C] 2012/08/08 下午 06:53:33.30 SMTP CITask 
StateMachine> Received 18 bytes from 10.0.2.15 [03D8:0008-090C] 
[03D8:0008-090C] R: HELO vboxdomino853 [03D8:0008-090C] 2012/08/08 下午 
06:53:33.30 SMTP CITask StateMachine> Sent 86 bytes to 
10.0.2.15 [03D8:0008-090C] [03D8:0008-090C] S: 250 vbox-domino853.cn.ibm.com 
Hello vboxdomino853 ([10.0.2.15]), pleased to meet 
you<CRLF> [03D8:0008-090C] 2012/08/08 下午 06:53:33.30 SMTP CITask 
StateMachine> Received 26 bytes from 10.0.2.15 [03D8:0008-090C] 2012/08/08 
下午 06:53:33 SMTP Server [03D8:0008-090C] State change from Greeting to 
Greeting [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP Server 
[03D8:0008-090C] Processing in Greeting state [03D8:0008-090C] 2012/08/08 下午 
06:53:33 SMTP Server [03D8:0008-090C] State change from Greeting to 
Connected [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP Server: 
domino852.lotustest.com (10.0.2.15) connected
IP地址10.0.x.x允许匿名连接，不要求提供SMTP验证信息即可发送邮件 [03D8:0008-090C] 
[03D8:0008-090C] R: MAIL FROM: <<a href="mailto:admin@ftm.com" rel="nofollow" target="_blank" target="_blank">admin@ftm.com</a>> [03D8:0008-090C] 2012/08/08 下午 06:53:33.38 
SMTP CITask StateMachine> Sent 32 bytes to 10.0.2.15 [03D8:0008-090C] 
[03D8:0008-090C] S: 250 <a href="mailto:admin@ftm.com" rel="nofollow" target="_blank" target="_blank">admin@ftm.com</a>... Sender OK<CRLF> [03D8:0008-090C] 
2012/08/08 下午 06:53:33.39 SMTP CITask StateMachine> Received 24 bytes from 
10.0.2.15 [03D8:0008-090C] [03D8:0008-090C] R: RCPT TO: <<a href="mailto:admin@ftm.com" rel="nofollow" target="_blank" target="_blank">admin@ftm.com</a>> [03D8:0008-090C] 2012/08/08 下午 06:53:33 
SMTP Server [03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 
2012/08/08 下午 06:53:33 SMTP Server [03D8:0008-090C] HELO command 
received [03D8:0008-090C] 2012/08/08 下午 06:53:33.46 SMTP CITask 
StateMachine> Sent 35 bytes to 10.0.2.15 [03D8:0008-090C] [03D8:0008-090C] 
S: 250 <a href="mailto:admin@ftm.com" rel="nofollow" target="_blank" target="_blank">admin@ftm.com</a>... 
Recipient OK<CRLF> [03D8:0008-090C] 2012/08/08 下午 06:53:33.46 SMTP 
CITask StateMachine> Received 22 bytes from 10.0.2.15 [03D8:0008-090C] 
[03D8:0008-090C] R: RCPT TO: <<a href="mailto:rea@ftm.com" rel="nofollow" target="_blank" target="_blank">rea@ftm.com</a>> [03D8:0008-090C] 2012/08/08 下午 06:53:33.46 
SMTP CITask StateMachine> Sent 33 bytes to 10.0.2.15 [03D8:0008-090C] 
[03D8:0008-090C] S: 250 <a href="mailto:rea@ftm.com" rel="nofollow" target="_blank" target="_blank">rea@ftm.com</a>... Recipient OK<CRLF> [03D8:0008-090C] 
2012/08/08 下午 06:53:33.46 SMTP CITask StateMachine> Received 4 bytes from 
10.0.2.15 [03D8:0008-090C] [03D8:0008-090C] R: DATA [03D8:0008-090C] 
2012/08/08 下午 06:53:33.48 SMTP CITask StateMachine> Sent 53 bytes to 
10.0.2.15 [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP Server 
[03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 2012/08/08 下午 
06:53:33 SMTP Server [03D8:0008-090C] MAIL command received [03D8:0008-090C] 
2012/08/08 下午 06:53:33 SMTP Server: Originator: <<a href="mailto:admin@ftm.com" rel="nofollow" target="_blank" target="_blank">admin@ftm.com</a>> [03D8:0008-090C] 2012/08/08 下午 06:53:33 
SMTP Server [03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 
[03D8:0008-090C] S: 354 Enter message, end with "." on a line by 
itself<CRLF> [03D8:0008-090C] 2012/08/08 下午 06:53:33.50 SMTP CITask 
StateMachine> ITASK_STATE_RECV_TEXT: Received total line 19, 1 bytes from 
10.0.2.15 [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP Server 
[03D8:0008-090C] RCPT command received [03D8:0008-090C] 2012/08/08 下午 
06:53:33 SMTP Server: Recipient: <<a href="mailto:admin@ftm.com" rel="nofollow" target="_blank" target="_blank">admin@ftm.com</a>> [03D8:0008-090C] 2012/08/08 下午 06:53:33 
SMTP Server [03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 
2012/08/08 下午 06:53:33.63 SMTP CITask StateMachine> Sent 35 bytes to 
10.0.2.15 [03D8:0008-090C] [03D8:0008-090C] S: 250 Message accepted for 
delivery<CRLF> [03D8:0008-090C] 2012/08/08 下午 06:53:33.67 SMTP CITask 
StateMachine> Received 4 bytes from 10.0.2.15 [03D8:0008-090C] 
[03D8:0008-090C] R: QUIT [03D8:0008-090C] 2012/08/08 下午 06:53:33.67 SMTP 
CITask StateMachine> Sent 73 bytes to 10.0.2.15 [03D8:0008-090C] 
2012/08/08 下午 06:53:33 SMTP Server [03D8:0008-090C] RCPT command 
received [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP Server: Recipient: 
<<a href="mailto:rea@ftm.com" rel="nofollow" target="_blank" target="_blank">rea@ftm.com</a>> [03D8:0008-090C] 2012/08/08 下午 06:53:33 
SMTP Server [03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 
2012/08/08 下午 06:53:33 SMTP Server [03D8:0008-090C] DATA command 
received [03D8:0008-090C] [03D8:0008-090C] S: 221 vbox-domino853.cn.ibm.com 
SMTP Service closing transmission channel<CRLF> 邮件接收完毕 [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP 
Server [03D8:0008-090C] Processing in Connected state [03D8:0008-090C] 
2012/08/08 下午 06:53:33 SMTP Server [03D8:0008-090C] DATA command 
(cont.) [03D8:0008-090C] 2012/08/08 下午 06:53:33 SMTP Server [03D8:0008-090C] 
RFC822 message inbound stream saved to 
C:DOCUME~1ADMINI~1LOCALS~1Tempnotes74483Dst837147.TMP [05B0:0009-0A54] 
2012/08/08 下午 06:53:33 Router: Delivery to local recipient admin/ftm is ready 
with 1 messages [05B0:0009-0A54] 2012/08/08 下午 06:53:33 Router: Delivery to 
local recipient Rea/ftm is ready with 1 messages
邮件发送成功 <div class="uchome-message-pic"> </div><div class="uchome-message-pic"> </div>

Lotus Domino smtp 办公自动化服务器

著作权归作者所有

如果觉得我的文章对您有用，请点赞。您的支持将鼓励我继续创作！