SMTP Relay for external users

[ebag]

Hi,

I have the following setup:
2 servers, one scalix server and onde smtp gateway.

the SMTP gateway recieves all mail, filters it, and passes it on to the scalix server
they are both situated on de same network, and they also have a different external IP address (mapped through the firewall)

I want to configure the following situation:

the scalix server only accepts SMTP connections from the local subnet (192.168.0.0/255.255.0.0) authenticaed and unauthenticated
or from the internet when the client has authenticated.
But it must not accept unauthenticated connections from the internet, not even when it's mail for it's own domains (I want the other server to handle that)

How do I configure the options in /var/opt scalix/smtpd.cfg to do this?

[ebag]

I seem to have tackled the issue myself. for those who are interseted:

The following rules accept all mails from the local network, and only authenticated from the internet.
it does not accept unauthenticated connections from the internet, not even for mails for the domains it serves (this is to prevent bypassing of the smtp gateway, and thus the spamfilters)


RELAY accept 127.0.0.1
RELAY accept 192.168.0.0/255.255.0.0
SUBMIT accept 192.168.0.0/255.255.0.0
ANONYMOUS accept 192.168.0.0/255.255.0.0
AUTH_SUCCESS accept ALL
AUTH_MISMATCH accept ALL
ANONYMOUS Log_Reject ALL


p.s. Scalix team: thnx for the wonderfull product