Allowing only Authenticated Users and Friendly hosts to Deliver locally

How to stop non-authenticated SMTP sessions being able to send emails to your accounts within MailSite or also known as "how to stop unwanted email (Spam) from bypassing the Gateway by ignoring the mail MX records and sending directly to your SMTP IP/Port address".

**In MailSite Version 7 the MailSite console has been updated to incorporate this feature.  It can be found in the Security Properties on the Anti Spam tab**

When MailSite is installed behind a Gateway, it is possible that you want only Authenticated users or specified friendly hosts (your Gateway) to deliver emails to local accounts. MailSite has a feature that has previously been used to accomplish something approximately along these lines by:-

"Reject all incoming mail from these hosts" with the following three lines:

!62.172.47.242 (The Gateway IP)
!*(This allows only Authenticated users to Send to local account)
*

Unfortunately this feature was a by product of the design rather than a conscious intent and therefore never completely documented. Over time, changes in the architecture "broke" this undocumented usage. We have now implemented a better, more straight forward solution to MailSite when behind a known Gateway. With this new feature there are 3 settings; Disabled, allow only Authenticated Users, or allow Authenticated Users and Friendly Hosts.

This feature does not at this time have a GUI interface. To enable it, you will need to manually add items to the Registry or the SQL server, depending on the type of MailSite installation. An upcoming release of MailSite will include a GUI interface for easier administration.

SQL Server implementation

The below information needs to be added to the Database to enable this feature :

Table - MailServerProperties
ServiceName - Server
PropertyName - nounauthenticateddelivery
ServerRoleId - 0 (You may have more server roles and it needs adding to each role as required)
PropType - 4
PropIntValue - (For correct values to enter, see below section "Values to enable/disable this feature are:".)
PropStringValue - Null

Activation is then achieved by restarting the services OR by incrementing by 1(one)the value of 'configversion'in the Database as described below:

Table - MailServerProperties
ServiceName - Server
PropertyName - configversion
ServerRoleId - 0
PropType - 4
PropIntValue - (Increment by 1(One))
PropStringValue - Null

Registry Implementation

This setting will activate on the next connection to the SMTPRA service.

1. Open the Registry and navigate to this location 'HKLM\Software\Rockliffe\MailSite'
2. Add a DWORD Value with a name of nounauthenticateddelivery
3. See 'Values to enable / disable this feature are :' for the correct value to enter.

Note: Don't forget to add the Gateway IP address to the Friendly Hosts list in the console.

Values to enable / disable this feature are :

0 = The feature is disabled
1 = Authentication required for local delivery
2 = Authentication required for local delivery, but Friendly Host list exempt