hmLoadTopic({
hmKeywords:"Host Screening,Screening Hosts",
hmTitle:"Host Screen",
hmDescription:"The Host Screen is located at: Security » Security Settings » Screening. It is used to define which remote hosts will be allowed to connect to your local IP addresses. You may...",
hmPrevLink:"security--ip_screening.html",
hmNextLink:"security--smtp_screen.html",
hmParentLink:"security_menu.html",
hmBreadCrumbs:"<a href=\"security_menu.html\">Security Menu<\/a> &gt; Security Manager &gt; Screening",
hmTitlePath:"Security Menu > Security Manager > Screening > Host Screen",
hmHeader:"<h1 class=\"p_Heading1\" style=\"page-break-after: avoid;\"><span class=\"f_Heading1\">Host Screen<\/span><\/h1>\n\r",
hmBody:"<p class=\"p_BodyText_Center\"><img style=\"margin:0 auto 0 auto;width:32.5625rem;height:26.9375rem;border:none\" src=\".\/images\/screening_host-screen.png\"\/><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">The Host Screen is located at: <\/span><span class=\"f_MenuPath\">Security <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Security Settings <\/span><span class=\"f_MenuPath\" style=\"font-family: Verdana,Geneva,Arial,sans-serif;\">»<\/span><span class=\"f_MenuPath\"> Screening<\/span><span class=\"f_BodyText\">. It is used to define which remote hosts will be allowed to connect to your local IP addresses. You may specify a list of hosts and configure the server to allow only connections from those hosts, or you can configure it to refuse connections from the listed hosts. Host screening compares the EHLO and PTR values determined during the SMTP session with the values specified here. <\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">New Host Screen Item<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To create a new Host Screen entry, click <\/span><span class=\"f_BodyText\" style=\"font-weight: bold;\">New<\/span><span class=\"f_BodyText\">. This will open the New Host Screen Item dialog for creating the entry.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Local IP<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this drop-down list to choose the local IP address to which this Host Screen entry will apply. Choose &quot;All IPs&quot; if you wish it to apply to all of your local IP addresses.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Remote host (* and # wildcards ok)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enter the remote host that you wish to add to the list, associated with the Local IP designated above.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Accept connections<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Selecting this option means that the specified remote host will be allowed to connect to the associated local IP address.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Refuse connections<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Selecting this option means that the specified remote host will NOT be allowed to connect to the associated local IP address. The connection will be refused or dropped.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Remove<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To remove an entry, select the entry in the list and click <\/span><span class=\"f_BodyText\" style=\"font-weight: bold;\">Remove<\/span><span class=\"f_BodyText\">.<\/span><\/p>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Default Action<\/span><\/p>\n\r<p class=\"p_BodyText\"><span class=\"f_BodyText\">To specify the default action for connections from remote hosts that have not been defined, select an IP address from the list and click <\/span><span class=\"f_BodyText\" style=\"font-weight: bold;\">accept<\/span><span class=\"f_BodyText\"> or <\/span><span class=\"f_BodyText\" style=\"font-weight: bold;\">refuse<\/span><span class=\"f_BodyText\">. Once a default action has been specified, you can change it by selecting the &quot;&lt;default&gt;&quot; node beneath the IP address and then selecting the new default setting.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">accept<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this option is chosen, connections from any host not specifically defined on the Host Screen will be accepted.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">refuse<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this option is chosen, connections from any host not specifically defined on the Host Screen will be refused.<\/span><\/p>\n\r<div style=\"text-align: left; text-indent: 0; padding: 0 0 0 0; margin: 0 3.0625rem 0.8750rem 3.0000rem;\"><table style=\"background-color:#ffffe6; border:solid thin #000000; border-spacing:0;\">\n\r<tr>\n\r<td style=\"vertical-align:top; width:3.1250rem; height:3.1250rem; padding:0.3125rem; border:none\"><p class=\"p_NoFormat\"><img style=\"margin:0;width:3.1250rem;height:3.1250rem;border:none\" src=\".\/images\/lightbulb_on_50_yback.gif\"\/><\/p>\n\r<\/td>\n\r<td style=\"vertical-align:top; padding:0.3125rem; border:none\"><p class=\"p_Notes\"><span class=\"f_Notes\">The Host Screen will never block <a href=\"security--trusted_hosts.html\" class=\"topiclink\">trusted<\/a> or local hosts.<\/span><\/p>\n\r<\/td>\n\r<\/tr>\n\r<\/table>\n\r<\/div>\n\r<p class=\"p_DialogSectionHeading\" style=\"page-break-after: avoid;\"><span class=\"f_DialogSectionHeading\">Screening Settings<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Apply Host Screen to MSA connections<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Use this option to apply Host Screening to connections made to the server\'s <a href=\"default-domain-and-servers_ports.html\" class=\"topiclink\">MSA port<\/a>. <\/span><span class=\"f_ControlIndent\">This setting is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Drop connection on Host Screen refusal<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">When this option is enabled, the connection will be dropped immediately upon a Host Screen refusal.<\/span><\/p>\n\r<p class=\"p_ControlHeading\" style=\"page-break-after: avoid;\"><span class=\"f_ControlHeading\">Drop connection after EHLO (Do not wait for authentication)<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">Enable this option if you wish to drop banned connections immediately following EHLO\/HELO. Normally you would wait for authentication. This setting is enabled by default.<\/span><\/p>\n\r<p class=\"p_ControlIndent\"><span class=\"f_ControlIndent\">&nbsp;<\/span><\/p>\n\r"
})
