Messaging Gateway

Dear All

We are running SBG8.0.1-7 and we have two email domains, assume it's abc.com and abc2.com.

We have set an email aliases for abc2.com alias with abc.com. So that we assume that all user can receiving emails for both domains with the same email address by using LDAP sync. (e.g. keats@abc.com & keats@abc2.com). Everythings work fine but recently we have change the option from "Drop Invalid recipients" to "Reject Invalid Recipients", all emails send to abc2.com will be rejected as invalid recipients.

Can someone explain why this happen or email domain aliases will not working under "Reject Invalid Recipients"?

Regards,

Keats

Pretty sure I know what your issue is, I'm guessing you are using the default recipient validation query ((|(mail=%s)(proxyAddresses=smtp:%s))'?

The %s portion of this query is looking to match the exact 'mail' attribute or 'proxyAddress' attribute in the directory.  In your case this query is failing as the aliased address won't match what's in the 'mail' or 'proxyAddresses' attribute.  

You can actually adjust the recipient validation query to just verify the user portion of the address by using the '%u' instead of '%s' variable in the query.  If you do that I'm pretty sure this wiill resolve your issue.

You can find more details in the SBG 8 Administration Guide starting on page 488.

Cheers,

Kevin

Dear Kevin,

Thanks for your reply, our validation quyery was simply '(|(mail=*)(uid=*))', is that we should change it as '(|(mail=%u)(uid=*))'? As we don't have any testing environment so that we can test it before put it on production. Thanks for your help.

Regards,

Keats

Hi Keats,

This doesn't sound right to me, what type of directory are you working with?

Why don't you send me a PM with a screen shot of the LDAP settings?

Cheers,

Kevin

Dear Kevin

We are having LDAP sync. with Lotus Domino, the following are the screen dump for your reference

Regards,

Keats

Dear James

Attached the current setting for our LDAP sync. Is that we will need to remove them all and add again?

Regards,

Keats

Hi keats
You must be remove all LDAP server setting first.

James

Hi ..Keats
Pls see the attach image files ，Is the SBG LDAP Server setting with Domino Server..
I suggest you chioce Authentication and Recipient validation for 1st Domain LDAP Setting.
and choice the Recipient validation for the 2nd Domain LDAP setting.
U can try like this.

Regards

James

Hi Keats,

So LDAP Sync is used to drop messages to invalid recipients, Recipient Validation is used to reject messages to invalid recipients.  I'm not so sure
you need to remove the combined sync and validation source, I think you can probably just modify the recipient validation query.  You never told us what the query was by the way...

Kevin