hmLoadTopic({
hmKeywords:"Active Directory,Active Directory Port (Gateway),Active Directory Server (Gateway),Active Directory Verification (Gateway),Address Verification (Gateway),Backup Server,Gateway Domain Editor,Gateway Domain Editor Active Directory,Gateway Domain Editor LDAP,Gateway Domain Editor Minger,Gateway Domain Editor Verification,GatewayUsers.dat file,LDAP,LDAP Port (Gateway),LDAP Server (Gateway),LDAP Verification (Gateway),Minger,Remote LDAP server,Remote verification of addresses,Verification,Verification Gateways,Verification Remote Address,Verification via Active Directory,Verification via GatewayUsers.dat file,Verification via LDAP,Verification via Minger",
hmTitle:"Verification",
hmDescription:"One common problem with domain gateways and mail-drops is that they don\'t usually have a method for determining whether or not the recipient of an incoming message is valid. For",
hmPrevLink:"gateway_gateway.html",
hmNextLink:"gateway--verification.html#usingmultipleconfigurationsldap",
hmParentLink:"gateway_domain_gateways.html",
hmBreadCrumbs:"Setup Menu &gt; <a href=\"gateway_domain_gateways.html\">Gateway Manager<\/a> &gt; Gateway Editor",
hmTitlePath:"Setup Menu > Gateway Manager > Gateway Editor > Verification",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Verification<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5000rem;height:26.0000rem;border:none\" src=\".\/images\/gateways_verification.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">One common problem with domain gateways and mail-drops is that they don\'t usually have a method for determining whether or not the recipient of an incoming message is valid. For instance, if you act as a gateway for <\/span><span class=\"f_PlainText\">example.com<\/span><span class=\"f_BodyText\"> and a message comes for <\/span><span class=\"f_T_Code\">user01@example.com <\/span><span class=\"f_BodyText\">then you have no way of knowing whether or not there is actually a mailbox, alias, or mailing list corresponding to that address on example.com\'s email server. Thus you have no choice but to assume that the address is valid and accept the message. Further, since spammers commonly send messages to many invalid addresses, this problem can result in large amounts of junk email being accepted for the gateway.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">MDaemon contains a method to prevent this by verifying the recipient addresses. If the remote domain\'s server is configured to keep an LDAP or Active Directory server up to date with all of its mailboxes, aliases, and mailing lists, or if it runs a Minger server to provide remote address verification, then you can use the options on this screen to specify the LDAP, Active Directory, or Minger server where this information is stored. Then, when a message arrives for <\/span><span class=\"f_T_Code\">example.com<\/span><span class=\"f_BodyText\">, you can lookup the recipient\'s address on the other server and discover whether or not it is valid.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Address Verification<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Verify addresses using:<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Nothing<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Choose this option if you do not wish to use email address verification for this domain gateway. MDaemon will treat all of the domain\'s incoming messages as if the recipient is a valid address, since it will have no way of identifying which addresses actually exist for that domain.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">File<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Choose this option if you wish to use the <\/span><span class=\"f_T_Code\">GatewayUsers.dat<\/span><span class=\"f_ControlIndent2\"> file as the definitive list of addresses that will be used to verify whether or not the recipient of an incoming message for this domain is valid. This is a global list of addresses, applicable to all of your domain gateways, and even if you have chosen to use one of the other verification methods, this list will still be used as an extra source of valid addresses. When using the <\/span><span class=\"f_ControlIndent2\" style=\"font-style: italic;\">File<\/span><span class=\"f_ControlIndent2\"> option, however, it will be the only verification option used. You can open and edit the valid address list by clicking the <\/span><span class=\"f_ControlIndent2\" style=\"font-style: italic;\">Address verification file<\/span><span class=\"f_ControlIndent2\"> button below.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">LDAP<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Choose this option to activate remote address verification via LDAP or Active Directory. Whenever a message arrives for the remote domain its LDAP or Active Directory server will be queried to determine whether or not the recipient is valid. If it isn\'t valid the message will be rejected. If MDaemon is unable to connect to the LDAP\/AD server then it will assume the address is valid.<\/span><\/p>\n\r<p class=\"p_ControlHeading2\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading2\">Minger<\/span><\/p>\n\r<p class=\"p_ControlIndent2\"><span class=\"f_ControlIndent2\">Choose this option if you wish to query the domain\'s Minger server to verify recipient addresses for this domain. If MDaemon is unable to connect to the server then it will assume the address is valid. There is also a global option located on <a href=\"gateway_global.html\" class=\"topiclink\">Global Gateway Settings<\/a> that you can use to cause MDaemon to query your <a href=\"domain-sharing.html\" class=\"topiclink\">Domain Sharing<\/a> hosts as well.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Host name or IP<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enter the host name or IP address of the domain\'s LDAP\/Active Directory or Minger server. This is the LDAP\/AD or Minger server to which MDaemon will connect in order to verify that the recipient of an incoming message is a valid address at the domain for which this MDaemon is acting as a gateway or backup server.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Port<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Specify the port that the domain\'s LDAP\/AD or Minger server is using. MDaemon will use this port when verifying address information via LDAP, Active Directory, or Minger.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Test<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to test whether or not you have the remote address verification settings configured properly. MDaemon will simply attempt to connect to the designated LDAP\/AD server and verify that it responds to the specified information.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Cache<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to open the LDAP\/Minger cache. You can enable\/disable the cache on <a href=\"gateway_global.html\" class=\"topiclink\">Global Gateway Settings<\/a>.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Server is protocol version 3<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this checkbox if want gateway verification to use LDAP protocol version 3 with your server.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Chase referrals<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Sometimes an LDAP server doesn\'t have a requested object but may have a cross-reference to its location, to which it can refer the client. If you want gateway verificaiton to chase (i.e. follow) these referrals, enable this option. This is disabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">User name or Bind DN<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enter the User name or DN of the account that has administrative access to the domain\'s LDAP\/AD server so that MDaemon can verify the recipients of incoming messages addressed to the domain for which it is acting as a gateway or backup server. This is the DN used for authentication in the bind operation.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Password or Minger shared secret<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This password will be passed to the domain\'s LDAP\/AD server along with the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Bind DN<\/span><span class=\"f_ControlIndent\"> value for authentication. If using a Minger server then this is the shared secret or password used.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Base entry DN<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the Distinguished Name (DN) or starting point in the Directory Information Tree (DIT) at which MDaemon will query your LDAP\/AD server for address verification.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Search filter<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the LDAP\/AD search filter that will be used when querying your server to verify addresses. MDaemon will setup a default search filter that should work in most cases.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Search scope:<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This is the scope or extent of your LDAP\/AD searches.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Base DN only<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Choose this option if you wish to limit your search to only the base DN specified above. The search will not proceed below that point in your tree (DIT).<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">1 level below base DN<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option if you wish to extend your LDAP\/AD search to one level below the supplied DN in your DIT.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Base DN and all children<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">This option will extend the scope of your search from the supplied DN to all of its children, down to the lowest child entry in your DIT.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Address verification file<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to open the Gateway Valid Email Address List (i.e. the <\/span><span class=\"f_T_Code\">GatewayUsers.dat<\/span><span class=\"f_ControlIndent\"> file). This contains a list of addresses that MDaemon will consider to be valid recipients for incoming messages addressed to your domain gateways. Regardless of the verification option selected above, MDaemon will use this list as an extra source of valid address data. When using the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">File<\/span><span class=\"f_ControlIndent\"> option above, however, it will be the definitive and only verification option used.<\/span><\/p>\n\r<h2 class=\"p_Heading2\" style=\"page-break-after: avoid;\"><a id=\"usingmultipleconfigurationsldap\" class=\"hmanchor\"><\/a><span class=\"f_Heading2\">Using multiple configurations for LDAP verification queries<\/span><\/h2>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">You can specify multiple LDAP configurations for your gateway domains. To specify extra sets of LDAP parameters, setup your first set normally and then manually edit the <\/span><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace; color: #010100;\">GATEWAYS.DAT<\/span><span class=\"f_BodyText\"> file using Notepad.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Your new set of parameters should be created using the following format:<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPHost1=&lt;host name&gt;<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPPort1=&lt;port&gt;<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPBaseEntry1=&lt;base entry DN&gt;<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPRootDN1=&lt;root DN&gt;<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPObjectClass1=USER<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPRootPass1=&lt;password&gt;<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-size: 1.10rem; font-family: \'Courier New\',Courier,monospace;\">LDAPMailAttribute1=mail<\/span><\/p>\n\r<p style=\"margin: 0 0 0 1.5000rem;\"><span style=\"font-family: Arial,Helvetica,sans-serif; color: #000000;\">&nbsp;<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">For each new set of parameters, increase the numeral in each parameter<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_BodyText\">s name by 1. For example, in the sample set above, each parameter\'s name ends with &quot;1&quot;. To create an additional set each name would end with &quot;2&quot;. In another set, each would end &quot;3&quot;, and so on.<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">When the LDAP queries take place, MDaemon will perform multiple LDAP queries in sequence to find a match. &nbsp;If an error or a match is found no further checks are performed.<\/span><\/p>\n\r<p class=\"p_SeeAlso\" style=\"page-break-after: avoid; border-right: none; border-bottom: none; border-left: none;\"><span class=\"f_SeeAlso\">See:<\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"ldap--ldap.html\" class=\"topiclink\">LDAP\/Address Book Options<\/a><\/span><\/p>\n\r<p class=\"p_SeeAlsoLinks\" style=\"page-break-after: avoid;\"><span class=\"f_SeeAlsoLinks\"><a href=\"minger.html\" class=\"topiclink\">Minger<\/a><\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
