I'm looking for some advice, what I should to check at my brand new mail-server for it's correct behavior. /saying behavior, because it is working - just but want be sure than it is working correctly./

I don't want get blacklisted only because, for example I forgot disallow plaintext auth.

Want use `swaks` for verifying functionality "from the internet side".

As first comes to my mind:

1. open relay - should be not allowed
2. as I say above - disallowed plain text auth - allow only over tls.
3. try deliver to nonexistent local user - should fail
4. verify delivery (existence) of the *postmaster* and *abuse* aliases (some other is recommented to have?)

so

```
swaks --to .. --from .. --auth-user name --auth-password pass --protocol SMTP
                                                                ^^^^^^^^^^^^^

```

If this fails, with the message `*** Host did not advertise authentication` is *enough* OK for the 2.?

Any other ideas what I must/should verify? The `swaks` is great tool - if you know how to use it :) Using "exim" as MTA. What is your favorite swaks tip?