2 Installing GFI MailSecurity : 2.6 Preparing to install GFI MailSecurity on an IIS mail relay server
1. On the taskbar, click Start ► Settings ► Control Panel. Double-click Add/Remove Programs and then click Add/Remove Windows Components.
2. From the dialog on display, locate and click the Internet Information Services (IIS) component, then click Details.
3. Select the SMTP Service check box and World Wide Web Service check box. Click OK to start the installation of the selected services. Follow the onscreen instructions and wait until the installation completes.
1. On the taskbar, click Start ► Settings ► Control Panel. Double-click Administrative Tools and then double-click Internet Information Services.
2. Expand the server name node, right-click the Default SMTP Virtual Server node and then click Properties.
1. On the taskbar, click Start ► Settings ► Control Panel. Double-click Administrative Tools and then double-click Internet Information Services.
2. Expand the server name node then expand the Default SMTP Virtual Server and then click Domains. By default, you should have a Local (Default) domain with the fully qualified domain name of the server.
a) Right-click the Domains node, and then click New ► Domain.
C:\Documents and Settings\ozammit\My Documents\MSEC\Manual\images\emailForwardingIIS Setup.png
b) Select Remote and then click Next.
c) Type the domain name in the Name box and then click Finish.
NOTE: Upon installation, GFI MailSecurity will import Local Domains from the IIS SMTP service. If you add additional Local Domains in IIS SMTP service, you must also add these domains to GFI MailSecurity because this does not detect newly added Local Domains automatically. You can add more/new Local Domains using the GFI MailSecurity configuration. For more information, refer to the Adding Local Domains section in the General Settings chapter of this manual.
1. Right-click the domain you just created and then click Properties. Select the Allow the Incoming Mail to be relayed to this domain check box.
2. In the Route domain dialog box, click Forward all email to smart host and type the IP address (in square brackets) of the server which will handle the emails addressed to this new domain. For example, [123.123.123.123]
NOTE: The square brackets are used to differentiate an IP address from a hostname (which does not require square brackets), i.e., the server detects an IP address from the square brackets.
1. Right-click the Default SMTP Virtual Server node and then click Properties.
2. In the properties dialog box, click the Access tab and then click Relay to open the Relay Restrictions dialog box.
C:\Documents and Settings\ozammit\My Documents\MSEC\Manual\images\Access restrictions to virtual server.png
3. Click Only the list below and then click Add to specify the list of permitted computers.
C:\Documents and Settings\ozammit\My Documents\MSEC\Manual\images\Add computer to relay list.png
4. In the Computer dialog box, specify the IP of the mail server that will be forwarding the email to this virtual server and then click OK to add the entry to the list.
NOTE: You can specify the IP of a single computer, group of computers or a domain:
Single computer: Select this option to specify one particular host that will relay email via this server. If you want to look up the IP address of a specific host, click DNS Lookup.
Group of computers: Select this option to specify the base IP address for the computers that you want to relay.
Domain: Select this option to include all the computers of a specified domain. This means that the domain controller will openly relay emails via this server. Please note that this option adds processing overhead, and may reduce SMTP service performance because it includes reverse DNS Lookups to verify the domain name of all IP addresses that try to relay.
1. Start the Microsoft Exchange Administrator and double-click on Internet Mail Service to open the properties configuration dialog box.
C:\Documents and Settings\ozammit\My Documents\MSEC\Manual\images\internet mail connector settings.png
2. Click the Connections tab and in the Message Delivery area click Forward all messages to host. Type the computer name or IP of the machine running GFI MailSecurity.
3. Click OK and restart the Microsoft Exchange Server from the services applet.
2. Right-click the Connectors Node, click New ► SMTP Connector and then specify the connector name.
3. Click Forward all mail through this connector to the following smart host, type in the IP of the GFI MailSecurity server (the mail relay/Gateway server) and then click OK.
NOTE: Always enclose the IP address within square brackets [ ]. For example, [100.130.130.10].
4. Select the SMTP Server that must be associated to this SMTP Connector. Click the Address Space tab, and then click Add. Click SMTP and then click OK to accept the changes.
5. Click OK. All emails will now be forwarded to the GFI MailSecurity machine.
1. Double-click the Address Book in Lotus Notes.
3. Click Domains and then click Add Domains.
4. In the Basics section, click Foreign SMTP Domain from the Domain Type field and in the Messages Addressed to area, type “*” in the Internet Domain box.
5. Under the Should be routed to area, specify the IP of the machine running GFI MailSecurity in the Internet Host box.
2. Search for the option to relay all outbound email via another mail server. This option will be called something like Forward all messages to host. Enter the computer name or IP of the machine running GFI MailSecurity.
NOTE: If your ISP manages the DNS server, ask this provider to update it for you.
1. Open the command prompt, type nslookup and press Enter.
2. Type set type=mx and press Enter.
C:\Documents and Settings\ozammit\My Documents\MSEC\Manual\images\checking mx record of domain.png
NOTE: Instead of using an email client, you can send email manually through Telnet. This will give you more troubleshooting information. For more information, refer to this Microsoft Knowledge Base article: