Changing Scanner inbound mail settings

Products

• Messaging Gateway

Issue/Introduction

The Knowledge Article describes on how to change the IP address or port number through which a Scanner accepts inbound mail connections. You can also
designate whether or not the Scanner accepts inbound TLS-encrypted connections.

Environment

Symantec Messaging Gateway

Resolution

To change Scanner inbound mail settings:

1. In the Control Center, click Administration > Hosts > Configuration.
2. Under Hostname, check the inbound Scanner whose settings you want to modify and click Edit.
3. On the Edit Host Configuration page, click the SMTP tab.
4. Select the address where you want to receive inbound messages in the Inbound mail IP address drop-down menu
and enter the port number in the Port text box.
Only those IP addresses, including virtual IP addresses, that have been configured for this Scanner's network interface
card appear in the drop-down menu.
5. If IPv6 is enabled, you can select an IPv6 address where you want to receive inbound messages in the Optional
Inbound mail IPv6 address drop-down menu and provide the port number in the Port text box.
Only those IPv6 addresses that are configured for this Scanner's network interface card appear in the drop-down
menu. You can specify individual IPv6 addresses in any standard IPv6 format. Addresses are stored and displayed in
shortened format.
6. Check Accept TLS encryption if you want the host to accept connections using TLS encryption.
If you leave this option unchecked, Symantec Messaging Gateway will not advertise support for TLS encryption during
the SMTP session.
• You must configure an MTA TLS certificate and assign it to this Scanner before it can accept TLS encrypted email
from a connection.
• The SSL Restrictions setting on the Protocols > SMTP > Settings > SMTP tab affects the TLS versions that
Symantec Messaging Gateway advertises and supports.
Specifying SSL restrictions for TLS communications
7. Select the name of a certificate from the drop-down menu to authenticate the Scanner as a trusted source to clients
sending over TLS-encrypted connections.
8. Check Request client certificate if you want the Scanner to request a TLS encryption certificate from a sender before
accepting a TLS-encrypted connection.
9. Click Save to save settings for this host only.