|
Configuration
Enable automatic domain creation
When enabled, SecurityGateway will query your default user verification sources whenever an incoming message is for an unknown address at an unknown domain. If the address is valid, SecurityGateway will create both the domain and user. Automatic Domain Creation requires at least one default user verification source to be defined, and since queries will be made for all unknown addresses, a large number of queries might be made. This feature is disabled by default.
|
When using this feature it is crucial that your verification sources are properly configured to verify ONLY valid users. If a verification source were an open relay, for example, then every incoming email to an unknown domain or user would be validated by that source. This would likely result in many erroneous domains and users being created, caused by incoming spam to invalid addresses. |
Domain Ownership Verification
Require domain ownership verification for newly created domains
When enabled, a new domain does not become active immediately, whether created manually from the Domain List or by using the "Enable automatic domain creation" option above. Instead, it enters a pending state, and SecurityGateway generates a unique verification token for it. To activate the domain, its owner must publish that token in a DNS TXT record at _sgverify.<domain> on the domain's authoritative nameserver. The exact record to publish, including the token, is shown on the pending domain's Properties page, along with "Copy" buttons for the host and value so you can paste them directly into your DNS provider. This option is disabled by default.
SecurityGateway checks for the DNS record automatically once an hour in the background, so a domain becomes active on its own once the record is published, typically within the hour. If you don't wish to wait for the automatic check, the domain's Properties screen also has a "Verify Now" button that checks DNS immediately.
A global administrator can also click "Skip Verification" on the pending domain's Properties screen to activate it immediately without a DNS check. This is intended for cases where you already know a domain is legitimate and don't want to wait for DNS propagation. Additionally, when creating a new domain manually, a global administrator can check the "Skip domain ownership verification for this domain" on the Properties tab to bypass the pending state entirely for that one domain, rather than skipping it afterward.
Domains awaiting verification can be found on the Domains and Users list by filtering for "Pending verification" in the Show Search feature or by sorting the Status column. Finally, the Server Status section of the Dashboard also shows: "[xx] domain(s) pending ownership verification".
