Start/notes.ini Parameters/Allow_Passthru_Access

Allow_Passthru_Access

🛠️
Parameter: Allow_Passthru_Access
Short description: Global access control: which identities are allowed to use passthru connections via this server at all.

Profile

Parameter
Allow_Passthru_Access
Category
Security / TLS
Component
Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
Server document (Security → Passthru Use)
Possible values
Comma-separated name list; empty = no one

Description

Domino can act as a passthru server – a Notes client establishes a connection through an intermediate server to a target server that is not directly reachable. Allow_Passthru_Access is the global gatekeeper: anyone not on this list cannot use the server as a passthru hop, independent of the more granular Allow_Passthru_Callers/Clients/Targets lists.
If the value is empty (default), passthru is disabled.

Example configuration

Allow_Passthru_Access=PassthruUsers,LocalAdmins/acme

Notes & pitfalls

  • Default recommendation: leave empty unless passthru is explicitly required.
  • Mandatorily complemented by Allow_Passthru_Callers, Allow_Passthru_Clients, and Allow_Passthru_Targets (all four lists are evaluated using a logical AND).
  • In hub-and-spoke setups, configure carefully – avoid unintended routing paths.
  • Logging via Log_Passthru=1 is recommended during rollout.
  • The change takes effect after a server restart.