|
NPOShield Administrators Guide | ||
|
NPOShield
Users Administrators |
Administration via the WebConnect to https://secure.electricembers.net/nposhield-admin and log in as postmaster@your-domain.orgCreating the address listThe first step after we send you your administrator login and password is to create the list of valid addresses in your domain for the NPOShield system to allow. This list should include all usernames, aliases, forwarders, lists, and group addresses--any address @ your domain that should receive mail. If you have a small number of addresses, you can use the NPOShield Admin interface. Otherwise, you can send us your complete address list in a plain text file, one address per line, and we will import it for you.Changing your domain's MX recordOnce your full address list is configured in the NPOShield system, you can change your domain's mail routing to have it flow through our filtering servers before it gets delivered to your mail server. To do that, you need to edit (or have your Web/DNS host's tech support edit for you) your domain's DNS records, removing all current MX records and replacing them with one pointing to "nposhield.electricembers.net". In the format used by the popular BIND nameserver:
IN MX 5 nposhield.electricembers.net.
You should not retain any backup MX records, since that will only allow some
spam and viruses to flow to your mail server without getting filtered by
us, and the single MX given above actually represents a bank of fully
redundant servers (currently three) at EE, so there is little value in
adding any backup MXes.
If you don't know who hosts your domain's DNS or how to make this change to your MX record, we will do our best to help you track down this information. Locking down your mail server against unfiltered mailTo ensure that spammers and viruses don't circumvent NPOShield by sending directly to your mail server, we also recommend that you lock down your mail server to accept mail only when relayed through our filtering servers, which you might do either in a firewall or in your mail server's internal controls. If you can block by DNS name, you should allow incoming SMTP (port 25) connections only from *.electricembers.net. If you need IP addresses, they will be included in the email we send you with your setup instructions.Maintaining your address listRemember that whenever you change or add any new addresses in your domain in the future, you must update the NPOShield system with the change as well, or else mail to the new address will bounce back to the sender. You may also want to update NPOShield when you remove addresses, to minimize the amount of mail to invalid addresses that's forwarded to your mail server. Simply connect to the NPOShield Admin page and modify the listed addresses accordingly. Keep in mind that there is a small delay, up to 5 minutes, before new addresses on the NPOShield system will accept mail.Potential issues: False positives/negatives, greylistingIf you see spam or viruses slipping through untagged (false negatives), first ensure that you have only one MX record pointing to EE and that your mail server is locked down to receive mail only from us. If false negatives persist, or if you see legitimate mail mistakenly tagged as spam/virus (false positives), please see the FAQ for information on reporting. We adjust the anti-spam software carefully with the intent to (a) tag no solicited non-commercial mail and (b) tag as little solicited commercial mail as possible while (c) tagging as much spam as possible.If senders receive a rejection when sending to you that says they've been "greylisted", this is an indication that their mail server is not fully compliant with Internet standards. For more detail see the FAQ. | ||
 Home About us Support Services System status Clients Publications Resources Contact us Electric Embers Cooperative, Inc. is a member of NTEN and NoBAWC with many other allies g |
|||
