Start/notes.ini Parameters/Allow_Passthru_Callers

Allow_Passthru_Callers

🛠️
Parameter: Allow_Passthru_Callers
Short description: List of servers/users/groups allowed to use this server as a passthru routing hop.

Profile

Parameter
Allow_Passthru_Callers
Category
Security / TLS
Component
Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
Server document (Security → Route through)
Possible values
Comma-separated name list; empty = no one

Description

The Caller list controls which identities are allowed to use the server as a routing intermediate – typically other servers (e.g. hubs that route mail through DMZ servers). For Notes endpoints, Allow_Passthru_Clients is responsible instead.
It is often set in hub-and-spoke topologies, where spoke servers exchange mail centrally via a DMZ hub.

Example configuration

Allow_Passthru_Callers=*/HubServers/acme

Notes & pitfalls

  • Only effective if Allow_Passthru_Access also allows access.
  • Carelessly set wildcards (*) can turn the server into an open routing node.
  • Complements Allow_Passthru_Clients (endpoint side) and Allow_Passthru_Targets (target side).
  • Enable auditing via Log_Passthru=1.
  • The change takes effect after a server restart.