Hi,

I'm not sure I have an exact answer for your problem, but if Webshield is set to forward email it receives to Spam Filter, and Spam Filter is set to forward email it receives to your Email Server, then it is your Email Server that must be configured to send out the email. I am not familar with Webshields enough to know exactly how it's operating in your environment.

However, by having Spam Filter not answer for port 25 you lose the ability to block emails by IP since in your configuration the email is always coming from the same machine. A different approach might be to have Spam Filter on port 25, Webshield on a different port, and let Spam Filter handle incoming mail. In this scenario you get the benefit of using blacklist blocking on the emails.

Another approach, and I say it this way because I don't know how Webshield works, but you could leave your existing configuration as-is since it worksm, but add a second IP to your NIC on your server. Assign Spam Filter to answer port 25 on that IP only. Set your firewall to point incoming email to that same IP. This let's Spam Filter answer for port 25 and you get the ability to use the blacklist via incoming IP. Have Spam Filter forward email to the original IP port 25. Your users still use the original IP to send/receive email, incoming email from the Internet gets filtered, so both things may be addressed.

bill

If all 3 servers are on the same machine, the "best" setup should follow the following: (ports can be your choic.  This is my example of a known working system.)

First Server: SpamFilter  LISTEN Port = 25  SEND Port = 26

Second Server: WebShield 4.5  LISTEN Port = 26   SEND Port = 5525

Third Server: (Standard Mail Server) LISTEN Port = 5525

The problem here is that WebShield is the server that your clients should mail through and the port is not standard.  So ....

The fact is that WebShield will ONLY LISTEN on the Windows NT PRIMARY IP so here is what can be done.  Set up a second IP and set your MX record to point to that.  Set SpamFilters LISTEN IP to be the Secondary IP and the Port to be 25. Set the destination server to the PRIMARY IP and the port to 25

Then you can set WebShield to LISTEN on 25 and send to what ever your mail server is set for.  Your clients should be set to send on the PRIMARY IP.

WebShield settings MUST be set as follows:

Under the "Delivery" Tab, And then the "Mail Send" tab, the "WebShield and the mail server are on the same server" must be checked.   Delivery Methode should be set to Deliver all email to the local mail server.

In the Anti Spam-Relay section, all your client IP must be included and you must (due to a bug) have at least one domain listed and it really doesn't matter what domain as long as it is one of your valid ones.

I hope this helps.  It is not as complicated as it sounds.  Just hard to explain.

Regards,

Dan S.

Thanks to all,

My 3 servers configure perfect and worked as I expected.

Thanks again.

KJD