hmLoadTopic({
hmKeywords:"Configuring,Configuring IP Shield,IP Shield,IP Shielding,Setting up,Setting up IP Shielding",
hmTitle:"IP Shield",
hmDescription:"The IP Shield, located under the Security » Security Settings » Sender Authentication menu, is a list of domain names and matching IP addresses that will be checked during the...",
hmPrevLink:"security--trusted_ips.html",
hmNextLink:"security--smtp_authentication.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Sender Authentication",
hmTitlePath:"Security Menu > Security Manager > Sender Authentication > IP Shield",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">IP Shield<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/sender-authentication_ip-shield.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The IP Shield, located under the <\/span><span class=\"f_MenuPath\">Security » Security Settings<\/span><span class=\"f_MenuPath\"> » Sender Authentication<\/span><span class=\"f_BodyText\"> menu, is a list of domain names and matching IP addresses that will be checked during the <\/span><span style=\"font-family: \'Courier New\',Courier,monospace; color: #010100;\">MAIL From<\/span><span class=\"f_BodyText\"> command during the SMTP session. An SMTP session claiming to be from someone at one of the listed domains will be honored only if it is coming from one of the associated IP addresses. For example, suppose your domain name is example.com and your local LAN computers use IP addresses in the range from 192.168.0.0 to 192.168.0.255. With this information you can setup the IP Shield to associate the domain name example.com with the IP address range 192.168.0.* (wildcards are allowed). Thus anytime a computer connects to your SMTP server and states, &quot;<\/span><span style=\"font-family: \'Courier New\',Courier,monospace; color: #010100;\">MAIL FROM &lt;someone@example.com&gt;<\/span><span class=\"f_BodyText\">&quot;, the SMTP session will continue only if the connecting computer has an IP address within the required range from 192.168.0.0 to 192.168.0.255.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Enable IP Shield<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">Clear this checkbox if you wish to disable the IP Shield. The IP Shield is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Domain name<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enter the domain name that you wish to associate with a specific IP address range. You can also use the <\/span><span class=\"f_PlainText\">\$LOCALDOMAIN\$<\/span><span class=\"f_BodyText\"> macro to cover all local domains (including gateways). If you use this macro it will not be necessary to keep the IP Shield up to date when local domains or gateways change. By default, entries are added to the IP Shield associating all reserved IP address ranges with <\/span><span class=\"f_PlainText\">\$LOCALDOMAIN\$<\/span><span class=\"f_BodyText\">.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">IP address<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enter the IP address that you wish to associate with a domain name. You must enter this address in dotted decimal form.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Add<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click the <\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100; text-decoration: underline;\">A<\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">dd<\/span><span class=\"f_ControlIndent\"> button to add the domain and IP address range to the listing.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Remove<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this button to remove the selected entries from the listing.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not apply IP Shield to messages sent to valid local users<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Click this option if you want only those messages that are destined for a non-local user or invalid local user to be checked for a domain\/IP match. This will prevent others from posing as one of your local users in order to relay their mail through your server, but it will save resources by not checking messages that are addressed to your users. If you enable both this option and the <\/span><span style=\"font-family: Arial,Helvetica,sans-serif; font-style: italic; color: #010100;\">IP Shield honors aliases<\/span><span class=\"f_ControlIndent\"> option below, messages to valid aliases will be accepted as well.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not apply IP Shield to authenticated sessions<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this control is active, the IP Shield restrictions will not apply to authenticated users. Mail will be accepted from an authenticated user regardless of the IP address from which he or she connects. Further, when a user doesn\'t authenticate and access is refused,<\/span><span class=\"f_BodyText\"> the message returned to the SMTP client will be &quot;Authentication required&quot; in order to give the user a clue that he can fix the problem by configuring the mail client to use authentication before sending a message. <\/span><span class=\"f_ControlIndent\">This option is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Do not apply IP Shield to Trusted IPs<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this control is active, the IP Shield will not be applied when the connection is from a <a href=\"security--trusted_hosts.html\" class=\"topiclink\">Trusted IP address<\/a>. This option is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">IP Shield honors aliases<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enable this option if you want the IP Shield to honor address aliases when checking domain\/IP address shields. The IP Shield will translate an alias to the true account to which it points and thus honor it if it passes the shield. Without this option enabled, the IP Shield will treat each alias as if it is an address independent of the account that it represents. Thus, if an alias<\/span><span style=\"font-family: \'Times New Roman\',Times,Georgia,serif; color: #010100;\">\'<\/span><span class=\"f_ControlIndent\"> IP address violates an IP Shield then the message will be refused. This option is mirrored on the <a href=\"alias_options.html\" class=\"topiclink\">Settings screen<\/a> of Aliases — changing the setting here will be reflected there.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">If you want incoming messages that are addressed to valid aliases to be exempt from IP Shielding then click both this option and the <\/span><span class=\"f_ControlIndent\" style=\"font-style: italic;\">Do not apply IP Shield to messages sent to valid local users<\/span><span class=\"f_ControlIndent\"> option above.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Check FROM header address against IP Shield<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_BodyText\">Check this box if you want the IP Shield to compare the address taken from the message\'s FROM header in addition to that taken from the SMTP MAIL value. This option is disabled by default.<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/forbidden_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">Using this option could cause problems with certain types of messages, such as those coming from mailing lists. It should therefore be enabled only if you are sure you need it.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
