Creating an Adjacent domain document
You create an Adjacent domain document when you need to restrict the transfer of mail from one adjacent domain to another.
About this task
For example, if you are in domain B and want to prevent mail from an adjacent domain A from traversing your domain to reach another adjacent domain C, create an Adjacent domain document that names C as the adjacent domain and denies mail from A.
The restrictions you define in the Adjacent domain document apply to the domain of the previous hop only. That is, in the Adjacent domain document created in the previous example, adding A to the Deny list prevents mail originating in A from routing to C. This includes mail that domain A may receive from domain Z for eventual transfer to C.
But suppose you want to allow mail from A, but deny mail from domain Z, which uses A and B as intermediate domains to reach C. If the administrator in domain B removes domain A from the deny list of the Adjacent domain document for domain C, and adds domain Z, domain Z is allowed to route mail to C. This is because once the message arrives in domain B the domain of origin appears to be A, rather than Z. In the absence of restrictions on transferring mail from A to C, IBM® Domino® allows the message to route.
You also use Adjacent domain documents to allow Free Time searches across domains.
Adjacent Domain documents do not provide connectivity to adjacent domains, and are not required to enable connections between adjacent domains. To define routes between adjacent domains, create a Connection document.
By default, a domain that can route mail to your domain can also route mail through your domain to another adjacent domain. When mail routes from one domain to another through your domain, it ties up your resources. To prevent your servers from being used to transfer mail between other domains, you can selectively allow and deny mail routing through your domain to the domain named in the Adjacent domain document.
The Allow and Deny fields on the Restrictions tab of the Adjacent domain document let you control the flow of messages from other domains to the adjacent domain. Entries in these fields must be the names of adjacent domains; the Router ignores entries for non-adjacent domains beyond the previous hop. If you deny a domain from sending mail through your domain, the Router denies all mail received from that domain, including messages the domain may have passed on from another, non-adjacent domain. There is no way to restrict specific users from routing to an IBM® Notes® domain. Restrictions apply to all users in specified domain.
The settings in the Allow and Deny fields work in conjunction with the Allow and Deny fields on the tab of the Configuration Settings document. In the event of any conflict between settings, Domino® applies the most restrictive entry.
Messages may be further restricted by Adjacent Domain documents, Non-adjacent Domain documents, and Configuration Settings documents set up between domains along the routing path.
Procedure
- From the Domino® Administrator, click the Configuration tab and then expand the Messaging section.
- Choose Domains.
- Click Add Domain to create a new Domain document.
- On the Basics tab, complete these
fields:
Table 1. Basics tab fields Field
Enter
Domain type
Choose Adjacent domain.
Adjacent domain name
The name of the adjacent Domino® domain. The current domain must have a Connection document to this domain.
Domain description
Optional description of the domain
- To restrict other domains from routing mail through the
current domain to the adjacent domain, click the Restrictions tab
and then complete the following fields:
Table 2. Restrictions tab fields Field
Enter
Allow mail only from domains
Enter the names of adjacent Domino® domains that are allowed to route mail to this adjacent domain.
To allow any domain to route mail through the local domain to this adjacent domain, leave this field blank.
Deny mail from domains
Enter the names of adjacent Domino® domains that are not allowed to route mail to this adjacent domain.
To allow any domain to route mail through the local domain to this adjacent domain, leave this field blank.
Note: You cannot use wildcards in the Restrictions fields. You must enter explicit domain names. - On the Calendar Information tab, under Calendar server name, enter the name of the server in the adjacent domain that accepts and processes all scheduling queries for that domain.
- Click Save and Close.