Mail mapping as access control. Watchguard XCS

Mail Delivery Settings

Uploading mapping lists

A list of mappings can also be uploaded in one text file. The file must contain comma or tab separated entries in the form:

[type ("sender" or "recipient")],[map_in],[map_out],[value ("on" or "off")]

For example: sender,[email protected],[email protected],on

The file (mailmapping.csv) should be created in csv file format using a text editor. It is recommended that you download the mail mapping file first by clicking Download File , editing it as required, and uploading it using the Upload File button.

Mail mapping as access control

The system can block all incoming and outgoing mail messages that do not match a configured mail mapping.

This ensures that all incoming and outgoing mail matches a legitimate user as the destination or source of a message.

To configure access control:

1. Click the Preferences button.

2. Select the Enable Mail Mapping Access Control check box.

3. Click Apply .

Note the following when enabling Mail Mapping as Access Control :

ƒ Any users that send or receive mail require a mail mapping

ƒ The mailer-daemon address will bypass the access control list and does not require a mapping

ƒ The postmaster address will bypass the access control list and does not require a mapping

ƒ The following addresses must be added as mail mappings to ensure certain system-related messages can be sent out and received: o The admin user, such as: [email protected]

o Users configured to receive emailed reports o The user specified as the recipient in the Problem Reporting feature

ƒ If this feature is enabled, all incoming and outgoing mail will be blocked unless the user has a mapping listed in the mail mappings table.

User Guide 55

Mail Delivery Settings

Virtual Mappings

Virtual Mappings are used to redirect mail addressed for one domain to a different domain. This process is performed without modifying the To: and From: headers in the mail, as virtual mappings modify the enveloperecipient address.

For example, the system can be configured to accept mail for the domain @example.com and deliver it to

@sales.example.com. This allows the system to distribute mail to multiple internal servers based on the

Recipient: address of the incoming mail.

Virtual Mappings are useful for acting as a wildcard mail mapping, such as mail for example.com is sent to exchange.example.com. You can create exceptions to this rule in the Mail Mappings for particular users.

Virtual mappings are also useful for ISPs who need to accept mail for several domains, and situations where the envelope-recipient header needs to be rewritten for further delivery.

You should review the use of Mail Routes before setting anything in Virtual Mappings, as they may be more appropriate for delivering mail to internal mail servers.

When using Virtual Mappings, the Reject on Unknown Recipient and LDAP Recipient lookups will not be performed for these mapped addresses. This prevents these email addresses from being rejected by the system because the virtual mappings do not exist in an LDAP directory.

To configure virtual mappings:

1. Select Configuration > Mail > Virtual Mapping .

2. Click the Add Virtual Mapping button to add a new mapping.

3. Enter the domain or address to which incoming mail is directed in the Input field, such as

@example.com

.

4. Enter the domain or address to which mail should be redirected to, such as @sales.example.com

in the Output field.

The domain being virtually mapped or redirected must be defined via an "internal" DNS MX record to connect to this system.

56 WatchGuard XCS