Skip to main content

SpamTitan

Managing Domains

Go to System Setup > Mail Relay > Domains to add, edit, delete or verify your recipient email. SpamTitan Gateway will only accept email for domains listed in the Domains table. Use the search bar at the top of the domain list to filter through the listed domains:

ST-701-settings-mail-relay-filter.jpg

Adding a Domain

Tip

Click Import... to import domains in bulk from a comma-separated values (.csv) file rather than entering each domain separately. The CSV file must have the following format:

  • Domain name (required)

  • Destination Mail Server:Port (required)

  • Recipient Verification type (none/dynamic/LDAP) (required)

  • Domain Group Name (optional), listed after all recipient verification settings

See Importing Domains for more information.

You can also use SpamTitan APIs to import domains. See Using APIs in SpamTitan Gateway.

  1. Click Add....

  2. Using the table below for reference, complete the Add Domain window.

  3. Click Save to save your changes.

Editing a Domain

  1. Click on the edit ST-701-edit-button.jpg icon in the Options column.

  2. Using the table below for reference, complete the Edit Domain window.

  3. Click Save to save your changes.

Deleting a Domain

  1. Click the checkbox ST-701-check-box.jpg to the left of the domain name(s) you want to delete. To delete a single domain, click the delete ST-701-delete-button.jpg icon in the Options column to the right of that domain.

  2. Click Delete.

Verifying a Domain

Follow these steps to verify that a domain is entered correctly and to send a test email:

  1. Click the test ST-701-test-button.jpg icon on the right under the Options column. The Send Test Email dialog displays.

  2. Enter a valid email address for the selected domain.

  3. Click Send.

  4. Confirm the recipient has received the test email.

Domain Settings

Field

Description

Domain:

The Fully Qualified Domain Name (FQDN) of a domain that you receive email for. For example, example.com.

If outbound filtering is enabled, the FQDN of a domain for which you send mail can be entered. See Outbound Mail.

Destination Server:

The destination mail server FQDN or IP for this domain. Typically, the destination mail server is the Microsoft Exchange Server, or alternative mail server, on your local network.

Multiple servers can be specified for failover or used in a round-robin fashion. The delimiter used controls this behavior:

  • Comma (','): Each server listed is used in a round-robin.

  • Space (' '): The first entry is the primary mail server and subsequent entries are failover servers. Failover servers are only used if the preceding entry is unreachable.

Destination Port:

Destination mail server port (default: 25). If multiple destination mail servers are specified, they must all use the same port.

Enable MX Lookup:

Enable to relay mail using the MX records for the server listed in the Destination Server field (default: disabled). If enabled, you must enter a domain name in the Destination Server field.

Recipient Verification:

If recipient verification is enabled, messages to unknown users are immediately rejected before the message even arrives in your network. See More About Recipient Verification.

Choose a method to perform recipient verification from the drop-down menu:

  • Dynamic Recipient Verification: If your mail server supports recipient verification, select Dynamic Recipient Verification. Most Unix based mail servers, Groupwise, and Exchange 2003 (off by default) support this option.

    In the Verification Server field enter the server the verification probe will be sent to. This is normally the same as the destination server, but it may be different if required.

  • LDAP Recipient Verification: For Exchange 2000 mail servers, or other mail servers that support LDAP directories, select LDAP Recipient Verification and enter in your LDAP server details. This will query the LDAP server to check if the intended recipient(s) are valid or not.

    The default settings for LDAP Recipient Verification are as follows:

    Field

    Description

    LDAP Server:

    IP address or FQDN of your LDAP Server (use LDAPS:// in front of LDAPS addresses).

    Multiple LDAP servers can be specified. Separate each server with a comma. For example, LDAPS://ldap1.example.com,LDAPS://ldap2.example.com.

    LDAP Port:

    Default port is 389.

    LDAP Anonymous Search:

    Set to 'Not Allowed' for Exchange/Active Directory servers.

    LDAP Search User DN:

    The username that SpamTitan will use to connect to your LDAP server. Use email address format i.e. user@domain.local.

    Leave blank if anonymous bind is allowed.

    LDAP Password:

    Password for LDAP Search User. Leave blank if anonymous bind is allowed.

    LDAP Query Filter:

    (|(proxyaddresses=smtp$%s)(proxyaddresses=smtp:%s)(mail=%s))

    LDAP Result Attribute:

    mail

    LDAP Search base:

    Based on your domain name. If the internal domain is domain.local, then the search base is DC=domain, DC=local

  • Specify Allowed Recipients: When editing a domain, you can specify a list of allowed recipients by manually entering allowed email addresses. Alternatively, click Import to import a text file of allowed addresses. Specify one email address per line.

  • Specify Regular Expression: Regular expression, also known as regex or regexp, is a standard pattern matching tool used in many scripting languages. It allows you to create filters that can match patterns of text, rather than just single words or phrases.

RBL Checks:

This setting allows you to enable or disable Realtime Blackhole List (RBL) checks for this domain. The RBL test checks the IP address of all mail servers sending mail to your domain against lists of known spammer IP addresses. This test is extremely effective at blocking spam and it is strongly recommended leaving this option enabled. (default: Yes).

SPF Checks:

This setting allows you to enable or disable Sender Policy Framework (SPF) checks for this domain. The SPF test checks the SPF record of the sending domain to make sure the IP of the sender is allowed for the domain and if not, it rejects the mail. This test is effective at blocking spam, however, it can cause potential false positives due to improperly set up SPF records. It is recommended to enable with caution. (default: Yes).

Greylisting:

Allows you to enable or disable greylisting for this domain. Greylisting temporarily rejects all email and requires the sending server to send it again after 5 minutes.

IP Delivery Pool:

Outbound email sent from a user in this domain uses an IP address from the selected IP Delivery Pool. If no IP Delivery Pool is selected, the email is sent from the Main Pool, which defaults to the IP address of the appliance.

Go to System Setup > Network > IP Delivery Pools to configure IP delivery pools.

Domain Group:

Assign this domain to a domain group that has been already been created in AntiSpam Engine > Domain Groups. This field only appears if at least one domain group exists. The field auto-completes, offering suggestions of existing domain groups as you type.

Assigning a domain to a domain group allows one or more Domain Group Administrators to be created with access to the domains within that domain group.

In this section: