SMTP Proxy Active vs Transparent

[Guest]

[kilimanj99]

Can someone please explain something to me, I cant seem to find any documentation on this.

I understand that Transparent should mean that all mean is intercepted and run through the proxy withought any additional configurations needed by the clients right?

So my question is, what is active? What configuration settings are needed for this to work?

Here's what I am seeing:
GREEN - Transparent, RED - Inactive - mail passes both ways no problem
GREEN - Transparent, RED - Active - Inbound mail works but outbound does not (Why would you want RED active? to prevent random people from trying to relay off you?)

GREEN - Active, RED - Active or Inactive - mail passes both ways no problem

In all these scenerios it does not appear mail is being marked as SPAM when it should be. I set the spam filter to mark and pass with a score of 0, so I thought that would mean mark everything but nothing gets marked. So I put it up to 1, still nothing, and I know some are SPAM's. What am I missing to get my mail marked as *** SPAM ***?

Also, is it possible to prevent external sources from trying to relay? I can see they try but it fails/denied by my mail server, but I'd like to prevent the try too.

Thanks

[kilimanj99]

Found this thread thought it might help. I think it may be leading me to the right track but I still can't get it working. Basically I do/did have a port forward in the firewall from RED to my exchange server and an incoming allow rule of port 25 from RED to my exchange server. I disabled both of these firewall rules and can still telnet to port 25 so the SMTP proxy appears to be stepping in to take the port traffic, however mail never made it to my exchange mail server. I have spam set to pass so it shouldnt have been quarantined. I also tried every combination of Active, Inactive, Transparent for both RED and GREEN, I am unclear how these should look. Seems Active - Active works best. I have my domains and mail server listed in the incoming domains section.

www efwsupport com/index.php?topic=307.0

[kilimanj99]

ok, after a few hours of playing around I think I figured this all out.

1. Active just means that it will respond to port 25, whereas tranparent will just inspect the packets and intercept. So for inbound you need RED as active because Endian will become the new mail relay for your internal servers. For outbound if GREEN is active the internal mail server just sends the mail out normally, whereas if its transparent, the Endian box intercepts, does what it needs to, then sends it out.

So what I had to do was the following:
1. Disable my PAT on port 25 to my internal mail server
2. Disable my inbound FW rule on port 25 to my mail server
3. Make sure all my internal domains were in the accepted list
4. Lastly uncheck the 4 checkboxes under advanced looking for Helo and FQDN etc. I'll recheck these 1 by 1 to see which I can keep but my mail was failing with this on.

So now that I have it working - time to play around with the settings to lock it down a little tighter.

[kilimanj99]

oops, accidentally posted twice... <deleted>