PMG sending emails out directly (not through Exchange server).

[Damiano23]

Hi all. Rather new to PMG, and just set it up the other day and have begun testing and playing around with it in our environment. We have an on-prem Exchange server and the PMG sits in our DMZ/Perimeter network, and is used only for incoming email at the moment.

Put simply, any notifications (under Action Objects) where it notifies the sender (ie: for a blocked or rejected messages), PMG sends this notification out directly from itself; not through the downstream Exchange server.

This is a concern/issue, for many reasons.... many. But, I have to believe there is a configurable component somewhere to have PMG use the actual mail server (perhaps as a smart host) and not send out directly from itself? I cannot find anything in the GUI to accomplish this. Is there a way via the CLI to do so?

Thank you in advance.

 

[Damiano23]

I found it. You can in fact edit the pmg.conf file and add a smart host. One love.

 

[Stoiko Ivanov]

This is a concern/issue, for many reasons.... many. But, I have to believe there is a configurable component somewhere to have PMG use the actual mail server (perhaps as a smart host) and not send out directly from itself? I cannot find anything in the GUI to accomplish this. Is there a way via the CLI to do so?

GUI->Configuration->Mail Proxy->Relaying->Smarthost

That being said - PMG is usually installed between the internet and the downstream server (Exchange in your case) - so relaying outbound through that Exchange sounds strange - Make sure you don't create a mail-loop

I hope this helps!

 

[carsten2]

I also need the possibility to configure a output smart host to be able to also send outbound mails from the internal mail server via PMG. Currently outbound mail is the from the internal mail server directly via the providers smart host, so the virus filtering possibilities from PMG is lost.
Actually there are even several smart hosts for different domains, which should be supported by PMG. It is already possible for inbound mail, to configure different destinations according to the domain and the same should be possible for outbound mail.

 

[Stoiko Ivanov]

Currently outbound mail is the from the internal mail server directly via the providers smart host, so the virus filtering possibilities from PMG is lost.

Not sure I understand that - for mails _from_ your mail-servers you need to configure those mail-servers to relay through PMG (then virus scanning/etc. are available) - from PMG to the internet you can either send directly (if your provider allows that) or configure a smarthost (the smarthost of your provider)...

Actually there are even several smart hosts for different domains, which should be supported by PMG. It is already possible for inbound mail, to configure different destinations according to the domain and the same should be possible for outbound mail.

Yes this is also possible for inbound mails - just add the domains to 'Relay Domains', and configure the appropriate 'Transport' entry (where the mail _for_ this domain should be sent to) ?